Privacy Policy

Cloudfident AI has been designed with privacy in mind. We are based in Europe, so we comply with the General Data Protection Regulation (GDPR). Our business model is based on subscriptions, so we limit the information collected about you. For any questions, you can always contact us at hello@cloudfident.ai. All our servers are hosted in Europe, and data residency and processing of AI Models occur in Europe as well.

This Privacy Notice describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including our web platform (Cloudfident AI) and any related applications.

Summary of Key Points

• What personal information do we process? We may process personal information depending on how you interact with us and the Services.
• Do we process any sensitive personal information? We do not process sensitive personal information.
• Do we collect any information from third parties? We do not collect any information from third parties.
• How do we keep your information safe? We have adequate organizational and technical processes to protect your personal information.

1. What Information Do We Collect?

We collect personal information that you voluntarily provide to us when you register, express interest in our products and services, participate in activities, or contact us.

Personal Information Provided by You:

• Email addresses (stored encrypted)
• Login provider information
• Profile information (name, preferences, interests)
• Learning preferences for personalized content
• IP address (used for security, deleted after 90 days)

Platform Data:

• Generated content (courses, episodes, labs)
• Usage data (learning progress, session duration)
• Subscription data (managed securely)
• Device information (for security and troubleshooting)

2. How Do We Process Your Information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with the law. We process your information only when we have a valid legal reason to do so.

3. Legal Bases for Processing (GDPR)

• Consent: You have given permission for a specific purpose
• Performance of a Contract: Necessary to fulfill our contractual obligations
• Legitimate Interests: Reasonably necessary for business operations
• Legal Obligations: Required for compliance with law

4. When and With Whom Do We Share Your Information?

We may share data with third-party service providers who perform services for us:

• Cloud Computing Services: Google Cloud Platform, Cloudflare
• Payment Processing: Stripe
• Analytics: Google Analytics (with IP anonymization and GDPR-compliant configuration)

5. Cookies and Tracking Technologies

Essential Cookies (Always Active):

• Authentication and session management
• Security and CSRF protection
• Basic platform functionality

Optional Cookies (Require Consent):

• Analytics (opt-in only)
• Marketing and personalization (opt-in only)

6. AI-Based Products

We offer AI-powered products through Google Cloud Gemini. Data processing happens in Europe with European endpoints. Google Cloud guarantees it will never use your data to retrain models or for any other purpose beyond providing the service.

7. Data Retention

• Log files: 90 days
• Generated content: Retained while account is active
• Account data: Retained while subscription is active
• Payment records: 7 years (legal requirement)
• Backup data: 30 days retention cycle

8. Security Measures

• Information encrypted in transit and at rest
• Web Application Firewall protection
• Google Cloud Platform security infrastructure
• Rate limits to prevent abuse
• Regular backups and redundancy
• Access controls and authentication requirements

9. Your Privacy Rights

Under GDPR, UK GDPR, and other applicable laws, you have the following rights:

• Right to access: Request copies of your personal data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Limit how we process your data
• Right to data portability: Receive data in machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Where processing is based on consent

To exercise your rights, contact us at hello@cloudfident.ai. We will respond within 30 days at no cost.

10. Updates to This Notice

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top. If we make material changes, we may notify you by prominently posting a notice or by sending you a notification directly.

11. Contact Us

If you have questions or comments about this notice, please contact us at:
Email: hello@cloudfident.ai

By using Cloudfident AI, you acknowledge that you have read and understood this Privacy Policy.