Privacy Policy

Introduction

CloudSealed LLC ("CloudSealed", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our website (cloudsealed.com) and cloud health check platform (collectively, the "Service"). By accessing or using the Service, you agree to this Privacy Policy.

Data Controller

The data controller responsible for your personal information is:

• E-mail: contact@cloudsealed.com

Information We Collect

We collect information in the following categories:

Account Information

When you register, we collect your full name, corporate email address, phone number (optional), job title (optional), company name, and password (stored in hashed form). We only accept corporate email addresses; consumer email providers are blocked.

Technical & Business Data

Through our health check wizard, you may submit information about your IT systems, software inventory, API integrations, cloud infrastructure configurations, log files, architecture diagrams, and security policies. This data is used exclusively to produce your Cloud Efficiency Statement.

Automatically Collected Data

We automatically collect IP address, browser type and version, operating system, referring URLs, pages viewed, access times, and device identifiers. We use cookies and similar technologies as described in our Cookie Policy.

How We Use Your Information

• To provide, maintain, and improve the Service
• To produce Cloud Efficiency Statements and engineering reports
• To communicate with you about your account, reports, and support tickets
• To send service-related notifications and updates
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms

Legal Basis for Processing

We process your personal data based on: (a) your consent when you create an account and submit data; (b) the necessity to perform our contract with you (Terms of Service); (c) our legitimate interests in improving the Service, ensuring security, and preventing fraud; and (d) compliance with legal obligations under applicable law, including LGPD (Brazil) and US state privacy laws.

Information Sharing

We do not sell, rent, or trade your personal information. We may share data with:

• Service providers: Cloud hosting (Google Cloud Platform), email delivery, and analytics providers who process data on our behalf under strict contractual obligations
• Assigned analysts: CloudSealed engineers assigned to your health check who need access to submitted data to produce your report
• Legal requirements: When required by law, regulation, legal process, or governmental request
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users

International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. When transferring data from Brazil or the EEA, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) and ensure compliance with LGPD Article 33 requirements for international transfers.

Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Technical data submitted for analysis is retained for 24 months after report delivery, after which it is securely deleted unless you request earlier deletion. Audit logs are retained for 5 years to comply with regulatory requirements. You may request deletion of your data at any time by contacting contact@cloudsealed.com.

Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right of access: Obtain a copy of your personal data we hold
• Right of rectification: Correct inaccurate or incomplete data
• Right of erasure: Request deletion of your personal data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to restrict processing: Limit how we process your data
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at contact@cloudsealed.com. We will respond within 15 business days (LGPD) or 45 days (CCPA), as applicable.

LGPD — Brazil

If you are a resident of Brazil, your personal data is processed in accordance with the Lei Geral de Proteção de Dados (LGPD, Law No. 13.709/2018). You have all rights listed above, plus the right to petition the ANPD (Autoridade Nacional de Proteção de Dados). Our Data Protection Officer (DPO) can be reached at contact@cloudsealed.com. We process your data based on consent (Art. 7, I) and contract performance (Art. 7, V).

CCPA / US State Privacy Laws

If you are a resident of California or another US state with privacy legislation, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. CloudSealed does not sell personal information. We do not use personal information for automated decision-making or profiling. To submit a verifiable consumer request, contact contact@cloudsealed.com.

Cookies & Tracking

We use essential cookies for authentication and session management. We may use analytics cookies (such as Google Analytics) to understand how the Service is used. For full details, see our Cookie Policy. You can manage cookie preferences through your browser settings.

Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or sending an email to your registered address at least 30 days before the changes take effect. Continued use of the Service after changes constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

• 📧 contact@cloudsealed.com