How We Use Your Information

This document outlines the specific purposes for which CloudNexus collects, processes, and utilizes your personal and technical data.

Last Updated: November 2025

1. Introduction

At CloudNexus, we are committed to transparency regarding how we handle your information. This page details the lawful bases and operational purposes for which we process data related to our cloud hosting, infrastructure, and managed services. We only use your information for the purposes explicitly disclosed here, in compliance with GDPR, CCPA, and applicable international data protection regulations.

2. Service Delivery & Account Management

Our primary use of your information is to provide, maintain, and improve our cloud infrastructure services. This includes:

  • Account Provisioning: Creating and managing your CloudNexus account, authentication credentials, and access permissions.
  • Resource Allocation: Deploying and configuring virtual machines, storage volumes, databases, and networking resources based on your selections.
  • Service Continuity: Monitoring infrastructure health, performing maintenance, and ensuring uptime across our global data center network.
  • Usage Tracking: Measuring CPU, memory, storage, and bandwidth consumption to ensure fair usage and accurate billing.

3. Billing & Financial Processing

We use payment and subscription data to process transactions, enforce contractual obligations, and manage your billing cycle. This includes:

  • Processing invoices, payment methods, and subscription renewals.
  • Applying usage-based pricing, credits, and promotional discounts.
  • Preventing billing errors, managing refunds, and handling payment disputes.
  • Communicating billing statements, payment reminders, and account balance updates.

💡 Note: We do not store full credit card numbers on our servers. All payment processing is handled by PCI-DSS compliant third-party providers (e.g., Stripe, Adyen).

4. Security, Fraud Prevention & Compliance

Protecting your account and our infrastructure is critical. We process information to:

  • Detect, prevent, and investigate unauthorized access, abuse, or fraudulent activity.
  • Verify identity during account recovery, privilege escalation, or suspicious login attempts.
  • Comply with legal obligations, law enforcement requests, and regulatory reporting requirements.
  • Maintain audit logs for internal security reviews and third-party compliance certifications (SOC 2, ISO 27001).

5. Customer Support & Communications

We use your contact information and support interactions to assist you effectively:

  • Responding to technical inquiries, feature requests, and troubleshooting tickets.
  • Providing service alerts, maintenance notifications, and critical security advisories.
  • Sharing account updates, policy changes, or terms modifications that directly affect your services.

6. Service Improvement & Analytics

To build a better infrastructure platform, we analyze aggregated and anonymized data to:

  • Optimize performance, reduce latency, and improve resource allocation algorithms.
  • Identify common failure points and enhance system resilience.
  • Develop new features, APIs, and integration tools based on usage patterns.
  • Conduct internal research, machine learning training for predictive scaling, and capacity planning.

All analytics data is aggregated, stripped of direct identifiers, and used solely for operational improvement.

7. Marketing & Personalization (With Consent)

We may use your information for promotional purposes only where we have explicit opt-in consent or where permitted by law. This includes:

  • Sending newsletters, product updates, and event invitations.
  • Recommending relevant services or upgrades based on your current infrastructure usage.
  • Retargeting advertising on third-party platforms (managed via clear cookie consent mechanisms).

You may withdraw consent or opt out of marketing communications at any time via your dashboard preferences or by contacting our privacy team.

8. Data Retention & Deletion

We retain your information only for as long as necessary to fulfill the purposes outlined in this policy. Generally:

  • Active account data is retained for the duration of your subscription plus 12 months for billing and support history.
  • Security logs and audit trails are retained for 24 months to meet compliance and investigation requirements.
  • Anonymized analytics data may be retained indefinitely for research and infrastructure optimization.

Upon account termination, we securely delete or anonymize your personal data in accordance with industry-standard data sanitization practices.

9. Your Rights & Choices

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. You can exercise these rights by:

  • Using the self-service tools in your CloudNexus dashboard.
  • Submitting a formal data subject request via our privacy portal.
  • Contacting our Data Protection Officer directly (see below).

We will respond to valid requests within 30 days. No fee is required, and we will verify your identity before processing sensitive requests.

10. Contact Information

If you have questions about how we use your information, wish to exercise your privacy rights, or need assistance with your account data, please contact us:

  • Email: privacy@cloudnexus.io
  • DPO: data.protection@cloudnexus.io
  • Mail: CloudNexus Inc., 1200 Cloud Drive, Suite 400, San Francisco, CA 94107, USA
  • Support Portal: support.cloudnexus.io

We take data privacy seriously and are committed to addressing your concerns promptly and transparently.