Legal

Privacy Policy

Last updated: 12 April 2026.

Cloud Upload LLC (“Cloud Upload,” “we,” “us,” or “our”) operates the website cloudupload.tech (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site.

1. Information We Collect

Information you provide

  • Contact form submissions — name, email address, company name, phone number (optional), cloud provider, monthly cloud spend range, areas of interest, and any free-text message you include.
  • Free scan submissions — the AWS account ID you submit, the email address you supply for delivery, and any scope information you provide.
  • Newsletter subscriptions — email address only.

Information collected automatically

Our hosting provider (Firebase Hosting / Google Cloud) records standard request logs — IP address, user agent, requested URL, referrer, and timestamp — for the operation and security of the Site. We do not currently load any third-party analytics scripts (no Google Analytics, no advertising pixels, no behavioural tracking). If we add analytics in future, we will update this policy and surface a consent banner before any non-essential script loads.

2. How We Use Your Information

  • To respond to your inquiries and deliver requested services
  • To deliver free-scan reports and follow-up communications you opted into
  • To send the Cloud Security Brief newsletter (only if you subscribe)
  • To improve site performance and user experience
  • To comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

3. Third-Party Services

We use the following third-party services to operate the Site:

  • Firebase Hosting (Google Cloud) — website hosting and content delivery
  • Cloudflare — DNS management and bot mitigation (Turnstile) on form submissions
  • Amazon Web Services (SES) — transactional email delivery (free-scan reports, newsletter confirmations, contact-form acknowledgements)
  • Stripe — payment processing for paid engagements

Each of these providers has their own privacy policy governing how they process data on our behalf.

4. Data Retention

  • Contact form submissions — retained until your inquiry is resolved, plus 12 months
  • Free scan inputs and reports — retained for 12 months from delivery; you may request earlier deletion at any time
  • Newsletter subscriptions — retained until you unsubscribe
  • Hosting access logs — retained for 30 days for operational and security purposes, then automatically deleted

5. Cookies & Tracking

The Site does not currently set advertising or analytics cookies. The only client storage we use is strictly necessary — for example, recording that you have dismissed an in-page notice, or storing form-state during a multi-step submission. These are not used to track you across sessions or sites.

If we add analytics or marketing cookies in future, we will not set them until you have given explicit consent through a consent banner.

6. Your Rights Under GDPR (EEA Visitors)

If you are located in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Request erasure of your personal data
  • Request data portability
  • Restrict or object to processing
  • Withdraw consent at any time (without affecting the lawfulness of prior processing)

To exercise any of these rights, contact us at privacy@cloudupload.tech.

7. Your Rights Under CCPA (California Residents)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the sale or sharing of personal information
  • Non-discrimination for exercising your privacy rights

We do not sell or share your personal information as defined by the CCPA/CPRA.

8. Do Not Sell or Share My Personal Information

Cloud Upload does not sell or share your personal information with third parties for monetary or other valuable consideration. We do not run advertising trackers, and we do not enrich, segment, or resell visitor data.

If you would like us to confirm in writing that no such processing has occurred for your records, or to request deletion of any data we hold about you, email privacy@cloudupload.tech and we will respond within thirty (30) days.

9. International Data Transfers

Your information may be transferred to and processed in the United States, where our hosting infrastructure is located. For EEA visitors, we rely on Standard Contractual Clauses (SCCs) as the legal mechanism for cross-border data transfers, as provided by our third-party service providers (Google, Amazon).

10. Children’s Privacy

Our Site is not directed to individuals under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the most recent revision. We encourage you to review this page periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: