Overview & Commitment
At CloudNexus, we recognize that your personal data belongs to you. We are committed to providing you with transparent, accessible, and actionable controls over how your information is collected, processed, and retained.
This page outlines the specific data privacy rights available to you under applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other relevant global privacy frameworks.
Your Rights Under GDPR
If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom, you have the following rights under GDPR:
| Right | Description |
|---|---|
| Right of Access | Request a copy of the personal data we process about you, including purposes, categories, and recipients. |
| Right to Rectification | Request correction of inaccurate or incomplete personal data without undue delay. |
| Right to Erasure ("Right to be Forgotten") | Request deletion of your data when it is no longer necessary, consent is withdrawn, or processing is unlawful. |
| Right to Restriction | Request limitation of processing while accuracy, lawfulness, or retention is disputed. |
| Right to Data Portability | Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller. |
| Right to Object | Object to processing based on legitimate interests or direct marketing at any time. |
| Rights Related to Automated Decision-Making | Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects. |
Your Rights Under CCPA/CPRA
California residents are entitled to the following rights regarding their personal information:
- Right to Know: Request disclosure of categories and specific pieces of personal information collected, sources, purposes, and third parties shared with.
- Right to Delete: Request deletion of personal information collected through our services, subject to certain legal exceptions.
- Right to Opt-Out: Direct us not to sell or share your personal information with third parties.
- Right to Correct: Request correction of inaccurate personal information we maintain about you.
- Right to Non-Discrimination: We will not deny goods/services, charge different prices, or provide different quality of service for exercising your CCPA/CPRA rights.
- Right to Limit Use of Sensitive Data: Restrict use and disclosure of sensitive personal information (e.g., precise geolocation, SSN, health data) to purposes necessary for service delivery.
How to Exercise Your Rights
You may submit a verifiable consumer request to exercise any of the rights described above through the following methods:
- Online Portal: Log in to your CloudNexus account and navigate to
Account Settings > Privacy & Data > Request Data / Delete Account - Email: Send a detailed request to privacy@cloudnexus.com
- Mail: CloudNexus Data Protection Office, 100 Cloud Avenue, Suite 400, San Francisco, CA 94107, USA
Verification Process
To protect your data, we must verify your identity before processing any request. Verification methods depend on the request type and your account status. For business accounts, authorized representatives must provide written authorization on company letterhead.
Response Timeline
We will acknowledge receipt of your request within 10 business days and respond substantively within 30 days. Complex or numerous requests may require an extension of up to 60 additional days, which we will notify you of in advance.
Appeals Process
If you are dissatisfied with our response, you have the right to appeal by submitting a written appeal to appeals@cloudnexus.com. We will respond to appeals within 45 days. California residents may also report unresolved concerns to the California Privacy Protection Agency (CPPA).
Data Retention & Security
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data category and jurisdiction.
Security Measures
CloudNexus implements industry-leading technical and organizational measures to safeguard your data, including:
- AES-256 encryption for data at rest and TLS 1.3 for data in transit
- Role-based access control (RBAC) and multi-factor authentication (MFA) for internal systems
- Regular third-party penetration testing and SOC 2 Type II compliance
- Automated backup and disaster recovery systems across geographically distributed regions
- Strict data minimization and purpose limitation principles in system design
Contact & Data Protection Officer (DPO)
For questions regarding this policy, your rights, or to submit a request, please contact our Data Protection Office:
CloudNexus Data Protection Office
San Francisco, CA 94107
United States
We are committed to responding to all legitimate inquiries promptly and transparently. You may also contact the relevant data protection authority in your jurisdiction if you believe your rights have been violated.