Privacy Policy

CloudSealed LLC ("CloudSealed", "we", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our website (cloudsealed.com) and our cloud infrastructure analysis and compliance readiness platform (collectively, the "Service"). By accessing or using the Service, you agree to this Privacy Policy.

The data controller responsible for your personal information is:

We collect information in the following categories:

• To provide, maintain, and improve the Service
• To produce Cloud Efficiency Reports and engineering documentation
• To communicate regarding your account, reports, and support tickets
• To send service-related notifications and updates
• To detect, prevent, and resolve technical issues and security threats
• To comply with legal obligations and enforce our terms

We process your personal data based on: (a) your consent when creating an account and submitting data; (b) the necessity to perform the contract (Terms of Service); (c) our legitimate interests in improving the Service, ensuring security, and preventing fraud; and (d) compliance with legal obligations under applicable law, including the LGPD (Brazil) and US state privacy laws.

We do not sell, rent, or trade your personal information. We may share data with:

• Service providers: Cloud hosting (Google Cloud Platform), email delivery, and analytics providers that process data on our behalf under strict contractual obligations.
• Assigned specialists: CloudSealed engineers and consultants assigned to your project who need to access submitted data to produce your audit.
• Legal requirements: When required by law, regulation, legal process, or governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.

Your data may be processed in the United States and other countries where our service providers operate. When transferring data from Brazil or the EEA, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) and ensure compliance with LGPD Article 33 requirements for international transfers.

We retain your account data for as long as your account is active or as needed to provide the Service. Technical data submitted for analysis is retained for 24 months after report delivery, after which it is securely deleted unless you request earlier deletion. Audit logs are retained for 5 years to meet regulatory requirements. You may request deletion of your data at any time by contacting contact@cloudsealed.com.

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right of access: Obtain a copy of the personal data we hold about you
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request the deletion of your personal data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to restrict processing: Limit how we process your data
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us at contact@cloudsealed.com. We will respond within 15 business days (LGPD) or 45 days (CCPA), as applicable.

If you are a resident of Brazil, your personal data is processed in accordance with the General Data Protection Law (LGPD, Law No. 13,709/2018). You have all the rights listed above, plus the right to petition the ANPD (National Data Protection Authority). Our Data Protection Officer (DPO) can be contacted at contact@cloudsealed.com. We process your data based on consent (Art. 7, I) and contract execution (Art. 7, V).

If you are a resident of California or another US state with privacy legislation, you have the right to know what personal information we collect, request deletion, and opt-out of the sale of personal information. CloudSealed does not sell personal information. We do not use personal information for automated decision-making or profiling. To submit a verifiable consumer request, contact contact@cloudsealed.com.

We use essential cookies for authentication and session management. We may use analytics cookies (such as Google Analytics) to understand how the Service is used. For full details, see our Cookie Policy. You can manage cookie preferences through your browser settings.

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will promptly delete it.

We may update this Privacy Policy periodically. We will notify you of material changes by posting a notice on the Service or sending an email to your registered address at least 30 days in advance. Continued use of the Service after the changes constitutes acceptance.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: