Cloudrah legal
Privacy Policy
These documents are issued by Flexrah, LLC, the company behind Cloudrah. Questions: support@flexrah.com.
Information we process
We process account identifiers and profile details, organization and project information, support conversations and project requests, uploaded material, billing profiles and invoices, payment records, service configuration such as domains and environment variables, consent records, security and audit metadata such as sign-in events and device details, and technical information needed to operate the service.
Why we process it
We use this information to authenticate users, provide and operate the services you ordered, build and deploy your applications, issue invoices and collect payments, send receipts and service notifications, respond to support cases and project requests, maintain security, prevent abuse, meet legal obligations, and keep an auditable history of business decisions. We do not use project-request consent as marketing consent.
Legal bases and choices
Depending on your location and relationship with Cloudrah, processing may be necessary to take steps at your request before entering a contract, perform a contract, comply with law, or pursue legitimate interests such as security and service administration. Where consent is required, it can be withdrawn without affecting earlier lawful processing. You can choose which non-essential notifications you receive from your notification preferences.
Payments and card details
Card details are entered directly into our payment processor's secure fields and never reach Cloudrah's servers. We store only what is needed to show your payment history and issue receipts: the card brand, its last four digits, the wallet used if any, and the outcome of each payment. Saved cards are held by the processor and referenced by an identifier.
Code and deployments
When you connect a repository, we access it through the Git account you authorized, build the code on our build servers and run it on the servers in your project. We keep the build output of each release so it can be restored, store environment variables encrypted, and keep build and deploy logs with the deployment history. Application data on your servers belongs to you and is processed only to provide the service.
AI-assisted work
We use AI services to help analyse requirements, draft designs, code, tests and documentation, and monitor the services we run. We share with them only the project information a specific task needs. We never share passwords, keys or other secrets, payment details, or personal data about your own customers with AI services, and information shared with them is never used to train AI models. AI also helps us triage requests you send us. Information shared with AI services for a project is kept only until development is complete or for the period of your service agreement. A person reviews AI output before it is delivered to you or released to production. You can ask us not to use AI on your project; whether that is possible depends on the work and is not guaranteed.
AI and your dataSecurity notifications
To protect your account we email you about sign-ins from new devices, password, email and two-factor changes, and other security events on your own account. These notices are part of the service and cannot be switched off.
Retention and security
We retain account, billing, support and project-request records for the period needed to provide services, resolve disputes, maintain security and audit evidence, and meet legal and tax obligations; invoices and receipts are kept for as long as the law requires. Data on suspended or ended services is retained for a limited period before deletion. Access is restricted by role and project permissions, connections are encrypted, and sensitive values are stored encrypted. Do not submit passwords, private keys, or unnecessary sensitive personal information.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or an objection to certain processing. You may also complain to the relevant supervisory authority. Submit a privacy request through the authenticated support center, or email support@flexrah.com, so we can verify your identity.
Changes to this policy
We may update this policy as the service evolves. The effective date at the top of this page shows the current version, and we notify account holders of material changes through the workspace or by email.
Contact
Privacy questions and rights requests can be sent to support@flexrah.com or submitted through the Cloudrah support center.