Privacy Policy

1. Introduction

CloudNexus ("we," "our," or "us") operates a global cloud infrastructure and hosting platform. We are committed to protecting your privacy and handling your data openly and transparently. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, website, and client portal.

2. Information We Collect

We collect information to provide, improve, and secure our cloud infrastructure services. This includes:

• Account & Billing Information: Name, email, company name, billing address, and payment details processed securely through PCI-DSS compliant third-party processors.
• Technical & Infrastructure Data: IP addresses, domain names, SSH keys, API tokens, server logs, network traffic metadata, and deployment configurations necessary to operate your cloud resources.
• Usage & Analytics Data: Resource consumption metrics (CPU, RAM, storage, bandwidth), API call logs, control panel interactions, and performance telemetry.
• Support Communications: Messages, tickets, and attachments submitted to our technical support team.
• Device & Browser Information: Browser type, OS, screen resolution, referring URLs, and device identifiers when accessing our website or client portal.

3. How We Use Your Information

We use the collected data for the following business purposes:

• Provisioning, managing, and maintaining your cloud infrastructure and hosting environment.
• Processing payments, issuing invoices, and preventing fraud or abuse.
• Monitoring system health, performance, and security threats across our global network.
• Providing technical support, responding to inquiries, and enforcing our Terms of Service.
• Sending administrative notifications, security alerts, and product updates (you may opt out of marketing communications).
• Improving our platform architecture, capacity planning, and user experience.

4. Information Sharing & Disclosure

We do not sell your personal information. We may share data only in the following circumstances:

• Service Providers: Third-party vendors who assist with payment processing, email delivery, analytics, and customer support platforms. All processors are bound by strict data protection agreements.
• Legal Requirements: When required by law, subpoena, court order, or to protect the rights, property, or safety of CloudNexus, our customers, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where customer data may be transferred as a business asset.
• With Your Consent: When you explicitly authorize us to share specific information for a defined purpose.

5. Data Security & Retention

We implement industry-standard technical and organizational measures to protect your data, including:

• AES-256 encryption for data at rest and TLS 1.3+ for data in transit.
• Strict access controls, multi-factor authentication, and role-based permissions for our infrastructure teams.
• Continuous network monitoring, automated threat detection, and regular penetration testing.
• Geographically distributed data centers with physical security, redundancy, and disaster recovery protocols.

We retain account and billing data for as long as your account is active or as needed to provide services. Technical logs and infrastructure telemetry are retained for a maximum of 12 months unless required longer for security or legal compliance.

6. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access, correct, or update your account information via the Client Portal.
• Request deletion of your data, subject to legal retention obligations and active service agreements.
• Export your data in a machine-readable format where technically feasible.
• Opt out of marketing communications by clicking "unsubscribe" in our emails or updating your preferences in the portal.
• Lodge a complaint with a supervisory data protection authority in your region.

7. Cookies & Tracking Technologies

Our website and client portal use essential cookies to maintain authentication, security sessions, and site functionality. We also use performance and analytics cookies to understand traffic patterns and improve user experience. You can manage cookie preferences through your browser settings. Blocking essential cookies may limit functionality of the client portal.

8. International Data Transfers

CloudNexus operates a globally distributed infrastructure. Your data may be processed in countries outside your region of residence. We ensure adequate protection through Standard Contractual Clauses (SCCs), data localization options in our Enterprise tier, and compliance with applicable cross-border transfer frameworks.

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via email or a prominent notice on our client portal. Your continued use of our services constitutes acceptance of the updated policy.