Your Data & User Rights

1. Right to Access & Data Portability

You have the right to request a copy of the personal data we hold about you. This includes information you have directly provided, as well as data we have collected through your use of CloudNexus services.

Data Portability

Where technically feasible, you may request that we provide your personal data in a structured, commonly used, and machine-readable format (e.g., JSON, CSV), or transmit it directly to another service provider where possible.

2. Right to Rectification

If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. This applies to billing information, account details, contact information, and any other identifiable data.

Once verified, we will update your records across all relevant systems and notify any third-party recipients where legally required.

3. Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent. Valid grounds for erasure include:

• The data is no longer needed for its original purpose
• You withdraw consent and no other legal basis exists
• You object to processing and no overriding legitimate interest applies
• The data was processed unlawfully
• Erasure is required to comply with a legal obligation

Exceptions: We may retain certain data to comply with legal obligations, resolve disputes, prevent fraud, or maintain system integrity, even after an account closure.

4. Right to Restrict Processing

You may request that we temporarily limit the processing of your personal data in the following circumstances:

• You contest the accuracy of the data (during verification period)
• Processing is unlawful, but you oppose erasure
• We no longer need the data, but you require it for legal claims
• You have objected to processing, pending verification of overriding legitimate grounds

During restriction, we may only process your data with your consent, for legal claims, to protect the rights of others, or for reasons of substantial public interest.

5. Right to Object to Processing

You have the right to object, on grounds relating to your particular situation, to processing based on legitimate interests or public task. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims.

You also have the absolute right to object to direct marketing at any time. If you object, we will immediately stop all marketing communications.

6. Rights Regarding Automated Decision-Making & Profiling

CloudNexus uses automated systems for account verification, fraud prevention, billing calculations, and infrastructure scaling. We do not use fully automated decision-making that produces legal or similarly significant effects without human review.

If you believe a decision significantly affects you, you have the right to:

• Request human intervention
• Express your point of view
• Challenge the decision

7. How to Exercise Your Rights

You can submit a request through any of the following channels:

• Client Portal: Navigate to Settings → Privacy & Data → Submit Request
• Email: Send a detailed request to privacy@cloudnexus.com
• Web Form: Use our official DSR form

Your request should include your full name, account email, clear description of the right you wish to exercise, and any relevant details to help us locate your data.

8. Response Timeframes & Verification

We aim to respond to all requests within 30 days of receipt. For complex or numerous requests, we may extend this period by up to 60 additional days, and we will notify you of any extension and the reason.

To protect your data, we may request reasonable verification of your identity before processing your request. We will only ask for information necessary to confirm your identity and will never request sensitive credentials like passwords.

9. Contact & Data Protection Officer

If you have questions about this policy, wish to exercise your rights, or believe we have not complied with data protection laws, please contact our Data Protection Office:

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

10. Policy Updates

We may update this User Rights page periodically to reflect changes in our practices, technology, or applicable laws. Material changes will be communicated via email or prominent notice on our dashboard at least 30 days before they take effect. The "Last Updated" date at the top of this page indicates when it was most recently revised.