Legal

Privacy Policy

Last updated: 17 September 2026 · Applies to cloudeel.com and dash.cloudeel.com

1. Data we process about you (account holders)

• Account data — email address, display name, avatar and login provider ID (Google / GitHub) if you use them; hashed session tokens; IP address hashes and user agent for security.
• Content — the sites, text, images and form definitions you create, including drafts and version history.
• Assistant conversations — your messages to the assistant and the changes it proposed, kept per site so you can review history. These are sent to our AI model providers to generate responses; providers are contractually prohibited from training on this data.
• Billing data — plan, subscription status and order history. Card details are collected and stored by Paddle, never by us.
• Usage data — AI credits used, form submission counts, bandwidth, for metering and abuse prevention.

2. Data on your published sites (visitors)

• Analytics — our built-in analytics record page views with a daily-rotating, salted hash of IP + user agent (not reversible, not stored raw), referrer, country, device type and page path. No cookies, no cross-site tracking, no personal data retained. Site owners see aggregates only.
• Form submissions — data visitors enter into forms is stored for the site owner, who is the data controller for that data. We act as processor. Each site with a form gets an automatically generated privacy notice for its visitors.
• Server logs — our CDN provider keeps short-term access logs for security and capacity.

3. Why we process data (legal bases)

• Performing our contract with you (account, hosting, billing).
• Legitimate interests: security, abuse and spam prevention, product improvement using aggregated data.
• Legal obligations: tax and accounting records via Paddle.
• Consent, where required, for marketing emails — you can withdraw at any time.

4. Sub-processors

We use a small number of providers to run the Service: cloud hosting and CDN (Cloudflare), database hosting, transactional email, AI model providers for the assistant, and Paddle for payments. A current list is available on request. All are bound by data processing agreements.

5. Retention

• Account data: until you delete your account, then 30 days.
• Site content and versions: per your plan's version history; deleted sites are purged within 30 days.
• Analytics: per your plan's retention (30 days to 3 years), aggregated data only.
• Form submissions: until deleted by the site owner.
• Billing records: as required by tax law (typically 7–10 years), held by Paddle.

6. Your rights

Under the GDPR, UK GDPR, CCPA and similar laws you may access, correct, export, restrict or delete your personal data, and object to processing based on legitimate interests. Use the account page to export or delete, or email support@cloudeel.com. We respond within 30 days. You may also complain to your local data protection authority. We do not sell personal information and do not use it for cross-context behavioural advertising.

7. International transfers

Data may be processed in countries outside your own, including the United States, under standard contractual clauses or equivalent safeguards.

8. Cookies

The editor uses one strictly necessary session cookie. The marketing website and published sites set no cookies by default. Site owners who embed third-party content (maps, videos) are responsible for any cookies those embeds set.

9. Children

The Service is not directed at children under 16 and we do not knowingly collect their data.

10. Changes and contact

We will notify you of material changes by email. Contact: support@cloudeel.com.

Other policies: Terms · Privacy · Refunds · Acceptable Use. Questions: support@cloudeel.com