Privacy Policy

1. Information We Collect

Account Information

• Email address
• Name (optional)
• Company name (optional)
• Billing information (processed by Stripe)

AWS Data

• AWS Access Key ID (encrypted)
• AWS Secret Access Key (encrypted with AES-256)
• AWS account ID
• AWS resource metadata (instance types, volumes, etc.)
• AWS cost and usage data

Usage Data

• Features accessed
• Optimization actions taken
• Browser type and version
• IP address (anonymized)

2. How We Protect Your Data

• Encryption: All AWS credentials are encrypted using AES-256 encryption
• Transmission: All data transmission uses TLS 1.3 or higher
• Storage: Data is stored in SOC2-compliant data centers
• Access Control: Strict role-based access control (RBAC)
• Monitoring: 24/7 security monitoring and intrusion detection
• Backups: Regular encrypted backups with point-in-time recovery

3. How We Use Your Information

We use your information to:

• Provide AWS cost optimization recommendations
• Analyze your AWS usage patterns
• Send you cost alerts and reports
• Process payments and manage subscriptions
• Improve our service and develop new features
• Provide customer support
• Send important service updates

We will NEVER:

• Sell your personal or AWS data to third parties
• Share your AWS credentials with anyone
• Use your AWS resources for our own purposes
• Send you spam or marketing emails without consent

4. Data Sharing & Third Parties

We only share your data with:

• Stripe: For payment processing (PCI-compliant)
• AWS: To access your cost and usage data
• Supabase: For data storage (SOC2-compliant)
• Vercel: For hosting (SOC2-compliant)

All third-party services are carefully vetted and required to maintain appropriate security standards.

5. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Object: Object to certain uses of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@cloudcomputingk.com

6. Data Retention

We retain your data as follows:

• Account Data: Until account deletion + 30 days
• AWS Credentials: Until removed by user
• Usage Data: 90 days for optimization history
• Billing Records: 7 years for tax purposes

Upon account deletion, all AWS credentials are immediately and permanently deleted.

7. Cookies & Tracking

We use cookies for:

• Session management (essential)
• Security (essential)
• Analytics (with consent)
• Preferences (functional)

You can control cookies through your browser settings.

8. Children's Privacy

CloudK is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

For privacy-related questions or concerns: