Privacy Policy

At CloudNexus, we recognize that privacy is a fundamental right and a cornerstone of trust. As a leading provider of enterprise-grade cloud infrastructure, hosting, and managed services, we handle your data with the same rigor, security, and transparency that we apply to our infrastructure: uncompromising.

This Privacy Policy describes how CloudNexus ("we," "our," or "us") collects, uses, discloses, and safeguards your personal information when you use our website, cloud infrastructure, hosting services, APIs, and related tools (collectively, the "Services").

Information We Collect

We collect information to provide, maintain, and improve our Services, ensure security, and comply with legal obligations. The categories of information we collect include:

How We Use Your Information

We use the collected information for the following business purposes:

• Service Delivery: Provisioning VPS instances, managing Kubernetes clusters, configuring load balancers, and ensuring 99.999% uptime SLAs.
• Security & Compliance: Monitoring for malicious activity, implementing DDoS protection, encrypting data at rest and in transit, and maintaining SOC 2 Type II compliance.
• Billing & Invoicing: Processing payments, generating usage reports, and managing subscription tiers.
• Support & Communication: Responding to tickets, sending service alerts, and notifying you of maintenance windows or security patches.
• Improvement: Analyzing aggregate, anonymized usage patterns to optimize our global CDN edge nodes and AI-powered scaling algorithms.

Data Security & Infrastructure

Security is embedded in our architecture. We employ industry-leading measures to protect your data:

• Encryption: All data in transit is encrypted via TLS 1.3. Data at rest is encrypted using AES-256 encryption keys managed via HSMs (Hardware Security Modules).
• Isolation: Customer instances are isolated using Kubernetes namespaces and hypervisor-level virtualization. Your data never touches another customer's storage.
• Access Control: Role-Based Access Control (RBAC), multi-factor authentication (MFA) enforcement for administrative access, and audit logging for all privileged actions.
• Resilience: Multi-region redundancy, automated failover, and immutable backups ensure data durability of 99.999999999% (11 nines).

Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

• Service Providers: With trusted third-party vendors (e.g., payment processors like Stripe, email delivery services) who are contractually bound to data protection standards.
• Legal Requirements: If required by law, subpoena, or legitimate legal process, we may disclose data to authorities. We strive to notify you unless prohibited.
• Business Transfers: In the event of a merger or acquisition, your data may be transferred as part of the transaction, subject to this Privacy Policy.
• Your Consent: We may share data with your explicit permission.

Data Retention

We retain your data only as long as necessary:

• Active Accounts: Personal and usage data are retained while your account is active.
• Deleted Accounts: Upon account termination, user data is scheduled for deletion within 30 days. Backups may persist for up to 90 days before purging.
• Financial Records: Billing and tax records are retained for 7 years to comply with financial regulations.
• Logs: Security and access logs are retained for 12 months for forensic analysis.

Your Rights

Depending on your jurisdiction (e.g., GDPR for EU/UK residents, CCPA for California residents), you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to legal retention obligations.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests or direct marketing.

To exercise these rights, please contact our Data Protection Officer via the details provided at the end of this document. We will respond to verified requests within 30 days.

Cookies & Tracking

Our website uses cookies to enhance your experience:

• Essential Cookies: Required for authentication, session management, and security.
• Analytics Cookies: Help us understand traffic patterns and improve site performance (anonymized).
• Functional Cookies: Remember your preferences (e.g., dark mode, region selection).

You can manage cookie preferences via our Cookie Banner or browser settings. Disabling essential cookies may affect service functionality.

Children's Privacy

CloudNexus Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn we have collected such data, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email or a prominent notice on our dashboard. The "Last Updated" date at the top indicates the most recent revision.