Privacy Policy

Last Updated: 2026-03-17 · Version 1.0

Disclaimer: This document was drafted as a starting template and should be reviewed by a qualified legal professional before use.

1. Introduction

This Privacy Policy explains how Clouderized ("the Platform") collects, uses, and protects your personal information. By using the Platform, you consent to the practices described in this policy.

2. Information We Collect

2.1 Registration Data

Email address
Name (display name or real name)
Account type / tier selected (Starter, Pro)
Date of account creation

2.2 Payment Information

Payment method (handled by Stripe, not stored by Clouderized)
Billing address (if provided)
Invoice history and transaction records
Refund and chargeback records

2.3 Container & Application Logs

Standard output (stdout) and error logs (stderr) from your containers
HTTP request/response logs from the Traefik reverse proxy
Container lifecycle events (start, stop, restart)
Health check status and timestamps

2.4 Access Logs & Usage Data

IP addresses of incoming HTTP requests
Request paths, query parameters, and response codes
DNS queries and domain lookups
Bandwidth and egress data (for billing and abuse detection)
Container resource usage (CPU, memory, disk) over time

2.5 Support & Communication

Email correspondence with support
Support tickets and issue descriptions
Error reports and debugging information you voluntarily provide

2.6 Technical Data

Account login timestamps and IP addresses
API token creation and usage
System events (webhook deliveries, deployments, configuration changes)

3. Legal Basis for Processing

We collect and process the above data for the following purposes:

Service Delivery: Running and maintaining your containers, routing traffic, storing backups
Billing & Payments: Tracking subscription usage, invoicing, fraud detection
Security & Compliance: Detecting abuse (DoS, spam, malware), enforcing Acceptable Use Policy, preventing unauthorized access
Support: Troubleshooting issues, responding to your inquiries
Legal Obligations: Retaining data as required by law (e.g., tax records, court orders)

4. Data Retention

4.1 Account Data

While your account is active, we retain:

Email, name, account type, billing information
Container configuration and deployment history
Access logs and usage statistics

4.2 Post-Cancellation

After account cancellation or termination:

Personal registration data (email, name) is retained for 30 days, then deleted
Payment and invoice records are retained for 7 years (tax/legal obligation)
Container logs are deleted within 30 days
Backup files containing your data are deleted within 30 days

4.3 Abuse Records

If your account is suspended or terminated for abuse, evidence and investigation records may be retained indefinitely for legal protection and future reference.

5. Customer Data Ownership & Confidentiality

5.1 Your Ownership

You retain full ownership of your code, configuration, and database content. We do not access, analyze, or use your customer data for any purpose other than providing the Platform service.

5.2 Limited Access

Your customer data is encrypted at rest (if applicable) and in transit. The Operator does not intentionally read or inspect container contents except when:

You request support
We investigate suspected abuse or security incidents
Legal process (court order, regulatory request) requires disclosure

5.3 Secrets Management

Your database passwords, API keys, and secrets should not be hardcoded in your Dockerfile. Use environment variables (provided via Gitea repository secrets) to manage sensitive data. We are not liable for exposure of hardcoded secrets.

6. Third-Party Services

6.1 Stripe (Payments)

Payment processing is handled by Stripe. Your card information, expiration date, and CVV are processed by Stripe only; Clouderized does not store or access this data. See Stripe's Privacy Policy for details.

6.2 Contabo (Infrastructure)

Your containers and data are hosted on Contabo's VPS infrastructure in Singapore. See Contabo's Privacy Policy for their data handling practices.

6.3 Gitea (Code Repository)

If you use the provided Gitea instance (git.clouderized.com), your repository contents are stored on the Platform's infrastructure. See the Gitea Privacy Policy for details on Gitea's software.

7. Cookies & Local Storage

7.1 Minimal Cookies

The Platform uses minimal cookies:

Session Cookie: A session identifier for dashboard login (HttpOnly, Secure, SameSite=Strict)
No tracking cookies
No third-party analytics cookies (Google Analytics, Mixpanel, etc.)

7.2 Cookie Control

You may disable cookies in your browser; this may affect your ability to log in and use the dashboard.

8. Security

8.1 Industry-Standard Practices

We employ industry-standard practices:

HTTPS/TLS encryption for all data in transit
SSH key-only access (no password authentication) to the platform infrastructure
Rate limiting and egress filtering to prevent abuse
Regular security monitoring and incident response

8.2 No Absolute Guarantee

No system is perfectly secure. We cannot guarantee absolute security of your data. You acknowledge the inherent risks of cloud hosting and agree to implement your own security controls (e.g., secrets management, input validation).

9. Subprocessors & Data Transfers

9.1 Data Processing

Your data may be transferred to and processed by:

Stripe (payment processing, United States)
Contabo (infrastructure hosting, Singapore)
Email service providers (if support communications are forwarded, subject to your consent)

9.2 Jurisdiction

Data stored in Singapore is subject to Singapore data protection law. If you are in the EU, additional safeguards may apply under GDPR (see Section 10).

10. GDPR & Your Rights

10.1 EU & UK Residents

If you are a resident of the European Union or United Kingdom:

Right of Access: You may request a copy of all personal data we hold about you
Right to Rectification: You may correct inaccurate personal data
Right to Erasure: You may request deletion of your personal data (subject to legal retention requirements)
Right to Restrict Processing: You may request that we limit how we use your data
Right to Data Portability: You may request your data in a portable format
Right to Object: You may object to certain processing

10.2 Exercising Your Rights

To exercise these rights, email [email protected] with your request and proof of identity.

10.3 Response Time

We will respond within 30 days (extendable to 60 days for complex requests).

10.4 Complaints

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights.

11. California Consumer Privacy Act (CCPA)

11.1 California Residents

If you are a California resident:

Right to Know: You may request what personal information we collect and how we use it
Right to Delete: You may request deletion of your personal data
Right to Opt-Out: You may opt out of any "sale" of your data (we do not sell data)
Right to Non-Discrimination: We will not discriminate against you for exercising your rights

11.2 Exercising Your Rights

To exercise these rights, email [email protected].

12. No Sale of Data

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share data with service providers (Stripe, Contabo) only to the extent necessary to provide the Platform.

13. Children's Privacy

The Platform is not intended for use by individuals under 13 years old. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it immediately.

14. Updates to This Policy

We may update this Privacy Policy at any time. Material changes will be communicated via email (30 days notice). Your continued use of the Platform after such notice constitutes acceptance of the updated policy.

15. Contact Us

For privacy-related questions or to exercise your rights:

Email: [email protected]

We will respond to all privacy inquiries within 14 business days.

End of Privacy Policy