Legal & Policies

1. Terms of Service

Welcome to CloudNexus. By accessing or using our cloud hosting and infrastructure services, you agree to be bound by these Terms of Service. If you do not agree, please do not use our platform.

1.1 Account Registration

You must be at least 18 years old to create an account. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to provide accurate, current, and complete information during registration and to update such information to keep it accurate.

1.2 Service Access & Availability

CloudNexus strives to maintain continuous service availability. However, we do not guarantee uninterrupted service and reserve the right to temporarily suspend or modify services for maintenance, security updates, or unforeseen technical issues. Notice will be provided via email and status page whenever possible.

1.3 Payment & Billing

All fees are listed publicly and are subject to change with 30 days' notice. Payments are processed on a prepaid or postpaid basis depending on your plan. Failure to pay invoices may result in service suspension or termination. Refunds are prorated on annual plans within 14 days of purchase, subject to our refund policy.

1.4 Termination

We reserve the right to terminate or suspend your account immediately, without prior notice, if you violate these Terms or the Acceptable Use Policy. Upon termination, you will have a 14-day grace period to export your data before it is permanently deleted.

1.5 Limitation of Liability

CloudNexus shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business interruption, arising from your use of our services. Our total liability shall not exceed the amount paid by you in the preceding 12 months.

1.6 Governing Law

These Terms shall be governed by the laws of the State of Delaware, United States, without regard to its conflict of law principles. Any disputes shall be resolved in the state or federal courts located in Wilmington, Delaware.

2. Privacy Policy

CloudNexus values your privacy. This policy outlines how we collect, use, store, and protect your personal and technical data.

2.1 Data We Collect

• Account Information: Name, email, billing address, and payment details (processed securely via PCI-compliant providers).
• Usage Data: Server metrics, API logs, bandwidth consumption, and deployment history.
• Technical Data: IP addresses, device identifiers, cookies, and browser fingerprints for security and analytics.
• Customer Content: Files, databases, and applications hosted on our infrastructure. We do not scan, sell, or use your customer content for any purpose other than storage and delivery.

2.2 How We Use Your Data

We use your data to provision and maintain your cloud environment, process payments, improve service reliability, communicate important updates, and comply with legal obligations. Analytics data is anonymized and aggregated.

2.3 Data Security

All data in transit is encrypted via TLS 1.3. Data at rest is encrypted using AES-256. We implement strict access controls, regular security audits, and ISO 27001 compliant infrastructure monitoring. Multi-factor authentication is strongly recommended and available for all accounts.

2.4 Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. Requests can be submitted via the dashboard or to privacy@cloudnexus.io. We respond within 30 days.

2.5 International Transfers

Data may be processed in facilities located outside your home country. CloudNexus ensures appropriate safeguards (Standard Contractual Clauses) are in place for all cross-border data transfers.

3. Service Level Agreement (SLA)

CloudNexus is committed to delivering high-availability infrastructure. This SLA defines our uptime commitments and credit remedies if we fall short.

3.1 Uptime Calculation

Uptime is calculated as: 100% - (Total Downtime Minutes / Total Minutes in Month). Scheduled maintenance exceeding 4 hours per quarter counts against uptime. Unplanned outages exceeding 1 minute count against uptime.

3.2 Service Credits

Credits are automatically applied to the next invoice. To claim credits, you must open a support ticket within 30 days of the incident. Credits are the exclusive remedy for SLA breaches.

3.3 Exclusions

Uptime obligations do not apply to: customer-initiated configuration changes, abuse/misuse by the customer, third-party ISP failures, force majeure events, or beta/pre-production services explicitly labeled as such.

4. Acceptable Use Policy

Our infrastructure must be used responsibly and in compliance with all applicable laws. Violations may result in immediate suspension without refund.

4.1 Prohibited Activities

• Hosting illegal content, malware, phishing sites, or engaging in cyberattacks.
• Mining cryptocurrency without explicit written approval.
• Spamming, unsolicited bulk messaging, or violating CAN-SPAM/GDPR email regulations.
• Distributing copyrighted material without authorization.
• Attempting to bypass rate limits, DDoS protection, or security controls.

4.2 Resource Limits

Each service tier includes fair-use bandwidth, IOPS, and API rate limits. Sustained abuse of resources (e.g., network flooding, storage hoarding, API hammering) may trigger automatic throttling or account review.

4.3 Security Compliance

You are responsible for securing your instances, managing access keys, patching OS/software, and configuring firewalls. CloudNexus secures the underlying infrastructure and shared layers, but customer data and workloads fall under a shared responsibility model.

4.4 Reporting Violations

If you suspect abuse on our network, please report it immediately to abuse@cloudnexus.io with relevant logs and IP addresses. We investigate all reports within 24 hours.

5. Data Processing Agreement (DPA)

For customers subject to GDPR, CCPA, or other data protection regulations, this DPA supplements our Privacy Policy and defines our roles as Data Processor and your roles as Data Controller.

5.1 Processing Instructions

CloudNexus processes personal data only on documented instructions from you. We will notify you immediately if a request contradicts legal obligations or if we become aware of a data breach.

5.2 Subprocessors

We may engage third-party subprocessors for backup, monitoring, and analytics. All subprocessors are bound by data protection clauses and listed in our public Subprocessor Registry. You may object to new subprocessors within 30 days of notification.

5.3 Data Breach Notification

In the event of a confirmed or suspected personal data breach, CloudNexus will notify you within 72 hours, providing details on the nature of the breach, affected data categories, and remediation steps taken.

5.4 Audit Rights

Upon reasonable notice, you may request an independent security audit of CloudNexus facilities, provided you sign an NDA and comply with our operational guidelines. Audit costs are the responsibility of the requesting party unless material non-compliance is found.

6. Contact Legal Department

If you have questions about these policies, need a custom enterprise agreement, or wish to exercise your data rights, please reach out: