Parental Rights & Data Protection

1. Overview & Commitment

CloudNexus recognizes the critical importance of protecting minors' personal information online. We are fully committed to complying with the Children's Online Privacy Protection Act (COPPA), GDPR Article 8, CPRA, and other applicable data protection frameworks. This page outlines the rights parents and legal guardians hold regarding their children's data that may be processed through our infrastructure, platforms, or customer-facing applications.

2. Scope & Data Processing Role

Our services are designed for businesses, developers, and enterprises. Data involving children may be processed in the following contexts:

• Direct Collection: Account registration, support interactions, or portal access where minors provide information without parental consent.
• Client-Driven Processing: When our customers (service providers) collect children's data and use CloudNexus infrastructure to store, compute, or transmit it.
• Embedded Services: APIs, SDKs, or managed services integrated into third-party applications serving minors.

Regardless of context, CloudNexus maintains robust data isolation, encryption, and access controls to prevent unauthorized processing of minors' information.

3. Key Parental Rights

Parents and legal guardians have the following rights regarding their children's personal data:

1. Right to Review & Access: Request a complete record of all personal data collected, processed, or stored regarding your child, including metadata, logs, and third-party disclosures.
2. Right to Delete/Remove: Demand the permanent deletion of your child's data from our systems, backups, and cached environments, subject to legal retention obligations.
3. Right to Consent & Withdraw Consent: Provide or revoke verifiable parental consent before data collection occurs. Withdrawal must be honored within 30 days.
4. Right to Opt-Out: Prevent your child's data from being used for marketing, behavioral profiling, or shared with third-party analytics partners.
5. Right to Correct Inaccurate Data: Request amendments to any incorrect, outdated, or misleading information held about your child.

4. How to Exercise Your Rights

To submit a request, please follow these steps:

1. Prepare Documentation: Gather proof of guardianship, a government-issued ID, and details about the child's account or service usage.
2. Submit Request: Use our dedicated compliance portal or email privacy@cloudnexus.com with the subject line: PARENTAL RIGHTS REQUEST - [Child's Name].
3. Specify Your Request: Clearly indicate which right you are exercising (Access, Deletion, Correction, etc.) and provide any known account identifiers.
4. Acknowledgment: You will receive an automated confirmation within 48 hours, including a reference ticket number.
5. Resolution: We will act on your request within 45 calendar days, or sooner if required by applicable law.

Requests can be submitted in English or via our multilingual support interface. We do not charge fees for exercising parental rights.

5. Identity & Guardianship Verification

To protect against fraudulent requests and ensure data security, we verify the identity of the requesting parent or guardian before processing any action. Verification may include:

• Scanned or photo copy of a valid government-issued photo ID
• Court documents, birth certificates, or notarized affidavits proving legal guardianship
• Account ownership confirmation (last 4 digits of associated payment method, security questions, or recent login locations)
• Two-factor authentication verification if the account is linked to an existing CloudNexus customer portal

All submitted documents are encrypted, processed securely, and permanently deleted within 30 days of request fulfillment, unless required for legal compliance.

6. CloudNexus as a Data Processor

In many cases, CloudNexus acts as a Data Processor on behalf of our customers (Data Controllers). If your child's data is collected by a third-party application hosted on our infrastructure:

• You should first contact the application provider or service owner directly to exercise your rights.
• CloudNexus will cooperate with verified parental requests to the extent permitted by our service agreements and applicable law.
• We require all customers to sign Data Processing Agreements (DPAs) that mandate compliance with COPPA, GDPR, and related regulations.

Our infrastructure includes built-in compliance tooling, data residency controls, and audit logging to help our customers meet their legal obligations.

7. Contact & Support

For questions, concerns, or formal requests regarding parental rights and children's data privacy, please reach out through the following channels:

Our Privacy Compliance team is available Monday–Friday, 8:00 AM – 6:00 PM EST. Urgent requests or potential compliance violations can be escalated via secure encrypted channels.

8. Policy Updates & Legal Framework

This policy is reviewed regularly to align with evolving data protection laws, including:

• Children's Online Privacy Protection Act (COPPA) – U.S.
• General Data Protection Regulation (GDPR) Article 8 – EU
• California Consumer Privacy Act (CCPA) & CPRA – California
• Age-Appropriate Design Code (UK ICO)

We reserve the right to update this document to reflect regulatory changes, service enhancements, or internal compliance improvements. Material changes will be communicated via email to registered customers and posted to this page with a revised effective date.

Last Updated: October 15, 2025
Effective Date: October 15, 2025
Document Version: 2.4.1