Privacy Policy

1. Who is responsible

C10UD LLC, a Wyoming limited liability company, 30 N Gould St, Ste R, Sheridan, WY 82801, is the controller for the data described in this policy. For any privacy question or request, contact legal@c10ud.net.

We have not appointed a Data Protection Officer; we are not required to have one. Privacy requests are handled by the address above.

2. Our websites

Our public websites set no cookies, run no analytics or advertising scripts, and load no third-party fonts or trackers. You can read them without giving us anything.

Our web servers keep short-lived technical logs (IP address, request time, page requested, user agent) to keep the site running and to detect abuse. These are deleted or aggregated within 30 days.

3. What we collect

• Account data — name, email address, company name, and account credentials, when you sign up.
• Billing data — billing address, tax details, and the payment record (last four digits, card brand, expiry) returned by our payment processor. We never receive or store complete card numbers.
• Service operational data — logs, metrics, IP addresses and diagnostic information generated when your workloads run on our platform, used to operate, secure and support the service.
• Customer Content — the code, files and data you deploy. We treat this as yours and access it only as described in section 5.
• Support and enquiry data — the contents of emails you send us and any information you include in them.

4. Why we use it, and on what basis

We use personal data to provide and operate the services, to bill you, to provide support, to secure the platform and investigate abuse, to meet legal and tax obligations, and to send service-related messages such as incident, billing or change notices.

Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract (providing and billing the services), legitimate interests (securing the platform, preventing abuse, and running our business, balanced against your rights), legal obligation (tax and accounting records), and consent where we ask for it — for example for marketing email, which you can withdraw at any time.

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use it to train machine learning models.

5. Access to your content

Our staff access Customer Content only when necessary: to respond to a support request you raised, to investigate a security incident or suspected policy violation, or where legally compelled. Access is limited to the people who need it.

6. Who we share it with

We share personal data with the service providers who help us run the business — infrastructure, payments and communications. They act on our instructions under contract. The current list is published on our Sub-processors page.

We may also disclose data where required by law or valid legal process, to enforce our terms, to protect the rights and safety of users or the public, or to a successor in connection with a merger or sale of assets — in which case we will notify affected customers.

7. Where data is held, and transfers

Our platform and customer data are hosted in Google Cloud and AWS regions across the Americas, EMEA and Asia-Pacific. Because we are a US company, personal data we hold is accessible from, and may be transferred to, the United States, where privacy laws differ from those in your country.

For transfers of personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (with the UK Addendum where applicable), which are incorporated into our Data Processing Addendum.

8. How long we keep it

• Account and billing records — for the life of the account and then as long as needed for tax and accounting law, generally seven years.
• Customer Content — while your account is active, and for 30 days after termination so you can export it, after which it is deleted.
• Operational logs — typically 30 to 90 days, longer only where an active security investigation requires it.
• Support correspondence — up to three years from the last message.

9. Security

We protect data with encryption in transit, encryption of secrets at rest, isolation between customer workloads, access controls limited to the staff who need them, and logging of administrative access. No system is perfectly secure, but we work to industry-standard practice and improve it continuously.

If a breach affects your personal data, we will notify you and any regulator as required by applicable law, without undue delay.

10. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to processing, to receive it in a portable format, and to withdraw consent. You also have the right to complain to your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect and why, to request deletion or correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

To exercise any right, email legal@c10ud.net. We respond within 30 days and may need to verify your identity first. If your data is on our platform because of a customer of ours, we will refer your request to that customer.

11. Children

Our services are for businesses and adults. They are not directed at children under 16 and we do not knowingly collect their personal data. If we learn we have, we delete it.

12. Changes

We may update this policy. The date at the top always shows the current version, and we will notify account holders by email before material changes take effect.