Privacy Policy
1. Who is responsible for your data
CloudHelm is the data controller for the personal data described here. Contact us about privacy at [email protected].
2. What we collect
- Account details: username and, if you sign in with email or Google, your email address.
- Service requests: your name, phone, email, the service you want, your description of the problem, whether you would like a call (and when), and the language you used on the site, so we can reply in it.
- Technical data: IP address and basic request logs, used for security, rate-limiting and fraud prevention. We also read your approximate country from our network provider (Cloudflare) to show your flag and suggest a language; it is not stored.
3. Why we use it (legal basis)
- To provide and manage the services you request - performance of a contract.
- To respond to enquiries and triage requests (including automated analysis of what you submit) - legitimate interests.
- To keep accounts and the service secure - legitimate interests and legal obligations.
- To send service-related notifications - performance of a contract. We do not send marketing without your consent.
4. Automated analysis
When you submit a request, an automated agent categorises it, estimates urgency and drafts a reply to help us respond faster. A human reviews and handles your request; the automation does not make decisions with legal or similarly significant effects about you.
5. Who we share it with
We share data only with service providers who help us operate, such as hosting, Cloudflare, email delivery, sign-in (Google/Firebase, if you use it), domain registrars and, if enabled, messaging/alert tools. If automated analysis is powered by an external provider, the text of your request is processed by that provider for that purpose. We do not sell your personal data.
6. International transfers
Some providers may process data outside your country. Where that happens we rely on appropriate safeguards (such as the provider's standard contractual clauses).
7. How long we keep it
We keep account and request data for as long as you have an account or an active engagement, and for a reasonable period afterwards to meet legal, accounting and security needs. You can ask us to delete it sooner (see below).
8. Your rights
Under the GDPR you can ask to access, correct, delete, restrict or port your data, and object to certain processing. To exercise any of these, email [email protected]. You also have the right to complain to your local data protection authority.
9. Cookies
We use a single essential cookie to keep you signed in. It is required for the site to work and is not used for advertising or cross-site tracking. Your language choice is saved only in your own browser (local storage).
10. Security
We protect accounts with hashed passwords (or federated sign-in), signed session tokens, rate-limiting, HTTPS and security headers. No system is perfectly secure, but we take reasonable measures to keep your data safe.
11. Changes
We may update this policy. The "last updated" date above shows the current version, and we will give notice of significant changes.