1. Introduction
JepCloud ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform, website, and related services (the "Service"). Please read this policy carefully. If you disagree with its terms, discontinue use of the Service.
2. Information We Collect
2.1 Information You Provide
- Account details: name, email address, company name, and password when you register.
- Billing information: payment card details and billing address (processed via our payment processor; we do not store raw card data).
- Cloud credentials: IAM roles or service account keys you provide to authorize infrastructure management in your cloud account.
- Communications: messages you send to our support team or through contact forms.
2.2 Information Collected Automatically
- Usage data: pages visited, features used, actions taken within the platform, and session duration.
- Log data: IP address, browser type, operating system, referring URLs, and timestamps.
- Device information: hardware model, operating system version, and unique device identifiers.
- Cookies and similar technologies: session cookies, analytics cookies, and preference cookies (see Section 7).
2.3 What We Do Not Collect
JepCloud does not access, store, or process your application data, source code, or databases. All such data remains within your own cloud account. We only receive metadata necessary to operate the Service (e.g., deployment status, resource metrics).
3. How We Use Your Information
We use collected information to:
- Provision, operate, and improve the Service.
- Process payments and manage your subscription.
- Authenticate your identity and maintain account security.
- Manage and provision cloud infrastructure on your behalf using provided credentials.
- Send transactional emails (e.g., deployment alerts, billing receipts, security notifications).
- Respond to support requests and communicate about the Service.
- Analyze usage patterns to improve features and user experience.
- Comply with legal obligations.
We do not sell your personal information or use it for behavioural advertising.
4. How We Share Your Information
We may share information with:
- Service providers: third-party vendors who help us operate the Service (payment processors, email delivery, analytics, infrastructure hosting), bound by confidentiality obligations.
- Cloud providers: the credentials and configuration you provide are used directly with your chosen cloud provider to provision resources.
- Legal authorities: when required by applicable law, court order, or governmental request.
- Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
We do not share personal information with third parties for their own marketing purposes.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is deleted within 90 days of account closure. Anonymized usage analytics may be retained indefinitely.
6. Data Security
We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
7. Cookies
We use cookies and similar tracking technologies to:
- Maintain your session and authentication state.
- Remember your preferences.
- Analyze aggregate usage via analytics tools (e.g., Google Analytics).
You may control cookie settings through your browser. Disabling cookies may affect the functionality of the Service.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data, subject to legal obligations.
- Object to or restrict certain processing activities.
- Request portability of your data in a machine-readable format.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us at privacy@jepcloud.org. We will respond within 30 days.
9. International Transfers
JepCloud is based in India. If you access the Service from outside India, your information may be transferred to and processed in India or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
10. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.
12. Contact
For privacy-related questions, concerns, or to exercise your rights, please contact our privacy team at privacy@jepcloud.org.