Who we are
Cloud Stack is a software service operated by [LEGAL ENTITY NAME] ("Sunil Consulting", "we", "us"), [REGISTERED ADDRESS]. Cloud Stack is available at cloudstack.aeorbit.com. For this policy, we're the controller of account data and the processor of the business data you add to run campaigns.
What we collect
Account data
- Your name and email address.
- A secure hash of your password. We never store your password itself.
- If you sign in with Google, your basic Google profile (name, email).
- Your plan, billing status and usage, such as pages generated this month.
Business and campaign data you add
- Client details: business names, websites, phone numbers, addresses, service areas, social profiles and images you upload.
- Campaign settings: services, locations, page counts and deploy settings.
- The content Cloud Stack generates for you, and the research used to create it.
Keys and credentials
- API keys you add (for example OpenAI, Google Gemini, Anthropic, DataForSEO, SerpAPI, Google Places, US Census).
- Cloud account credentials you connect for deploying pages.
Technical data
- IP address and request logs, used for security, rate limiting and troubleshooting.
- Pipeline logs and error messages from your campaign runs.
We don't collect payment card details. Payments are handled by Stripe.
How we use it
- To provide the service: run research, generate pages, check them and deploy them to the accounts you choose.
- To manage your account, plan and page budget, and to bill you through Stripe.
- To keep the service secure, for example blocking repeated failed sign-ins.
- To fix problems and improve Cloud Stack.
- To contact you about your account, and with product updates you can opt out of.
We don't sell your data, and we don't use your clients' business data to build pages for anyone else.
Who we share it with
Service providers we use
- Stripe, for payments and subscription management.
- Google, if you choose to sign in with Google.
- [HOSTING PROVIDER], which hosts Cloud Stack's servers and database.
Providers you connect with your own keys
When a campaign runs, Cloud Stack sends what each provider needs to your accounts with them. Examples: business details and page briefs to your AI provider, search queries to your search-data provider, and place lookups to Google Places. Generated pages go to the cloud accounts you choose for hosting. Each provider's own terms and privacy policy apply to that data.
Public sources
Research steps read public information such as search results, Reddit discussions, Wikipedia and your clients' public websites. We don't send your personal data to these sources.
Legal reasons
We may disclose data if required by law, or to protect the rights and safety of our users or the service.
Your API keys and credentials
API keys and cloud credentials are encrypted before they're stored. They're decrypted only while running your campaigns, and used only for your account's work. You can remove them at any time in Settings. Removing a key stops future runs that need it.
How long we keep it
- Account and campaign data: for as long as your account is open. When you delete your account, we delete it within [X] days, apart from records we must keep by law, such as billing records.
- Campaign working files (intermediate research and drafts): removed automatically 30 days after a campaign's last run.
- Logs: kept for up to [X] days.
- Published pages live in your own cloud accounts. You control them, and deleting your Cloud Stack account doesn't remove them.
Security
We use encryption for stored keys and credentials, hashed passwords, short-lived sign-in tokens, rate-limited sign-in, and separation between accounts' data. No system is perfectly secure. If we become aware of a breach affecting your data, we'll notify you as required by law.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain uses, and to complain to a data protection authority. To use these rights, email info@sunilconsulting.com. [ADD REGION-SPECIFIC SECTIONS, e.g. GDPR / UK GDPR / CCPA, AS ADVISED.]
If you add other people's personal data to Cloud Stack (for example a client's staff names or contact details), you're responsible for having the right to do so.
Cookies
The Cloud Stack app uses only what's needed to keep you signed in and secure. We don't use advertising cookies. [CONFIRM AND LIST ANY ANALYTICS TOOLS BEFORE PUBLISHING.]
Other terms
Cloud Stack isn't intended for children under 16. We may update this policy, and we'll post the new version here and tell you about significant changes. Data may be processed in countries other than yours, with appropriate safeguards [CONFIRM TRANSFER MECHANISMS].
Contact
Questions about privacy? Email info@sunilconsulting.com or write to [LEGAL ENTITY NAME], [REGISTERED ADDRESS].