Cloudovňa privacy & data

Data about you as a customer (your account, billing, messages) we process as the controller, and this policy applies to it.

Account: name, email, your password stored only as a hash (PBKDF2), invoice language and the date your email was verified.

Billing details, if you fill them in: first and last name, company name, address, company ID, tax ID, VAT ID and phone.

Payments: amounts, status and the payment provider's identifiers. Card or account details are not sent to us and we do not store them.

Technical data: your IP address is used during a request to limit repeated attempts and is not stored.

Health check results for your services, and emails you exchange with us.

Access to other services, if you link them: your Docker Hub or GitHub username and access token, and a Cloudflare API token.

Performance of the contract, Article 6(1)(b) GDPR: running your account, providing the services, payments, service emails (email verification, password reset, payment requests, invoices, downtime alerts) and support.

Legal obligation, Article 6(1)(c) GDPR: issuing and keeping invoices under accounting and tax law.

Legitimate interest, Article 6(1)(f) GDPR: keeping the service secure, preventing abuse and establishing or defending legal claims.

Invoices are kept for 10 years, as accounting law requires.

Health check results are kept for 7 days.

An unpaid order is withdrawn after 14 days.

A service suspended for an unpaid renewal is removed after 90 days, with its data and backups.

Our own disaster recovery backups of the servers are kept for up to 12 months and then overwritten.

The servers running your services and holding your data are in the EU.

Transfers to them rely on the EU-U.S. Data Privacy Framework where the company is certified, and otherwise on the European Commission's standard contractual clauses.

Transfers to them rely on the EU-U.S. Data Privacy Framework where the company is certified, and otherwise on the European Commission's standard contractual clauses.

Contabo GmbH, Munich (Germany): the servers that run your containers and databases.

we process it as your processor under the Data processing agreement, which is part of every order.

For a copy of your data or to close your account, write to [email protected] .

You have the right of access to your data and to a copy of it, to rectification, erasure, restriction of processing and portability

the right to object to processing based on legitimate interest

We do not use data for marketing and we do not sell it.