cloudysprout

At cloudysprout, privacy is fundamental to our digital infrastructure. We collect only necessary operational metrics to maintain server reliability and account security. We never sell user data to third-party ad networks.

We have written this document in plain language because privacy in infrastructure should be understood, not obscured. If any part of it is unclear, please write to us directly — every message is read by a member of our engineering team, not by an automated system.

Data Collection

Information stored includes contact email addresses for hosting notifications and telemetry logs required for network defense against unauthorized intrusion.

Specifically, we collect: billing and contact details required to maintain your account, DNS and configuration data necessary to operate your services, and infrastructure telemetry — request volume, error rates, geographic distribution — used to monitor uptime and detect anomalies. We do not collect the contents of your applications, database records, or any data stored within your hosted infrastructure.

Server access logs are retained for thirty days by default, then rotated. Where a security investigation is active, relevant logs are retained until the incident is fully resolved and documented.

How We Use Your Data

Account details are used to deliver the services you have provisioned, to notify you of critical infrastructure events such as maintenance windows and security advisories, and to process billing. Nothing more.

Telemetry data is used solely for operational purposes — capacity planning, anomaly detection, and performance optimization. It is aggregated and anonymized before any analysis, and it is never linked back to your account for marketing or profiling purposes.

• We do not use your data for retargeting campaigns.
• We do not sell, rent, or trade account details to third parties.
• We do not share infrastructure telemetry with advertising networks.
• We do not use AI-generated profiling on customer accounts.

Data Storage & Security

All customer data is stored within the same regions where their infrastructure is deployed. We do not mirror customer information to jurisdictions outside those regions without explicit consent.

Access to customer data is restricted to authorized engineers on a strict need-to-know basis. Every access event is logged, and logs are subject to periodic internal review. Encryption is applied both in transit and at rest using industry-standard protocols.

Third-Party Services

We use a small number of third-party services for payment processing, transactional email delivery, and external status page hosting. Each of these providers is selected for their security posture and is contractually prohibited from using customer data for their own purposes.

We do not embed third-party analytics, advertising pixels, or tracking scripts anywhere in our customer-facing infrastructure. Any cookies set by our website are strictly for session management and authentication.

Your Rights

You may request a complete export of all data we hold about your account at any time. Exports are provided in machine-readable formats and typically prepared within one business day.

You may also request deletion of your account and all associated data. Deletion requests are honored within thirty days, except where retention is required by applicable law or where an active security investigation requires ongoing access.

Data Breach Notification

In the unlikely event of a security incident affecting customer data, we will notify affected customers within seventy-two hours of confirming the breach. Notification includes a description of what occurred, what data was affected, and the steps we are taking in response.

Contact

Questions about this Privacy Policy or your account data can be directed to privacy@cloudysprout.com.

By provisioning infrastructure on cloudysprout, users agree to uphold acceptable web usage guidelines. Malicious network scanning, hosting illegal content, or sending unverified spam emails will result in immediate service suspension.

These terms are written in plain language because the culture of this platform depends on clarity, not legalism. If any part is unclear, please write to us directly and we will explain it further.

1. Acceptable Use

Accounts may be used for any lawful purpose — running websites, hosting applications, storing data, sending transactional email, and running APIs. You retain full ownership of everything you host.

The following activities are strictly prohibited on our infrastructure:

• Malicious network scanning or intrusion attempts against external hosts
• Hosting content that is illegal in the jurisdiction where your infrastructure is deployed
• Sending unsolicited bulk email (spam) or operating open mail relays
• Distributing malware, ransomware, or other harmful software
• Launching denial-of-service attacks against any target
• Cryptocurrency mining without prior written approval
• Hosting content that infringes on third-party intellectual property

Violations of acceptable use are treated as material breaches of these terms and may result in immediate suspension without refund, at our sole discretion.

2. Account Security

You are responsible for the security of your account credentials and any API keys, SSH keys, or authentication tokens associated with your account. This includes ensuring that any team members with access to your account are authorized to have it.

Where we detect suspicious activity on an account — unusual login locations, unexpected API usage, or compromised credentials — we may temporarily lock the account and notify you. Locking is a security measure, not a penalty, and access is restored as soon as the issue is resolved.

3. Billing & Payment

All services are billed in advance of the billing period. Payment is due on the invoice date, and services are suspended if payment is more than seven days overdue.

Refunds are available within the first 30 days of a new subscription, minus any domain registration fees and third-party costs already incurred on your behalf. After 30 days, unused portions of a billing period are not refunded, but you may cancel at any time to prevent future charges.

We do not raise prices on existing accounts without at least 60 days' advance notice, and customers who wish to keep their original pricing may do so by maintaining continuous service without interruption.

4. Service Availability & SLA

We target 99.99% uptime across all regions, measured on a rolling monthly basis. Scheduled maintenance is announced at least 72 hours in advance and is excluded from uptime calculations.

Where uptime falls below the SLA target on any given plan, affected customers are eligible for service credits. Credits are applied automatically to the next invoice — you do not need to submit a claim.

5. Data Ownership

You own all data you store on our infrastructure. This includes application code, database records, uploaded files, and configuration settings. We claim no rights over any of it.

You may export your data at any time through the control panel or via API. Where a full-server export is required, our support team will assist at no additional cost.

6. Termination & Data Retention

You may cancel your account at any time. Upon cancellation, your infrastructure is decommissioned and all associated data is securely erased within thirty days, except where retention is required by applicable law.

We may terminate an account for material breach of these terms, for non-payment exceeding 30 days, or for activities that endanger the stability or security of our infrastructure or other customers. Except in cases of serious abuse, we provide advance notice and an opportunity to remedy the issue.

7. Limitation of Liability

To the fullest extent permitted by law, cloudysprout shall not be liable for indirect, incidental, special, or consequential damages arising from the use of our services, including lost profits, lost data, or business interruption.

Where liability cannot be excluded, it is limited to the fees paid by the affected customer in the twelve months preceding the event giving rise to the claim.

8. Governing Law

These terms are governed by the laws of the jurisdiction in which cloudysprout is established. Any disputes shall be resolved in the courts of that jurisdiction, without prejudice to any additional protections provided by local consumer law.

9. Changes to These Terms

We may revise these Terms of Service at any time. Material changes will be communicated by email at least 30 days before taking effect, and the effective date at the top of this page will be updated accordingly. Continued use of the services after changes take effect constitutes acceptance of the updated terms.

10. Contact

Questions about these Terms of Service can be directed to legal@cloudysprout.com.

At cloudysprout, we use a minimal set of cookies and browser storage technologies — strictly for authentication, session management, and platform stability. We do not use advertising cookies, tracking pixels, or third-party analytics.

This document explains exactly what is stored, why it is stored, and how you can remove it. We have deliberately kept this short because we believe cookie notices should be read, not skipped.

1. What Are Cookies & Browser Storage?

Cookies are small text files set by a website and stored by your browser. They are transmitted with each request to the domain that set them, which allows a server to recognise a returning visitor.

Browser storage — including localStorage and sessionStorage — is a related but distinct technology. Unlike cookies, browser storage is never transmitted automatically with requests. It remains entirely on your device and is readable only by the code running on our pages.

2. What We Use

The following cookies and storage items are set by cloudysprout:

3. What We Do Not Use

We do not deploy advertising identifiers, cross-site tracking pixels, browser fingerprinting scripts, session recording tools, heat-map platforms, or behavioural profiling services of any kind.

We do not embed Google Analytics, Meta Pixel, Hotjar, Segment, Amplitude, or any equivalent visitor-tracking platform on any page of our site.

4. Third-Party Resources

We load a small number of third-party resources for typography and framework delivery. These are delivered as static assets and do not set tracking cookies on our behalf.

Where a payment page or status page is served from a partner domain, that partner's own cookie policy governs the storage set on that page. Links to those policies are provided at the point of transaction.

5. Managing Your Preferences

You have full control over cookies and browser storage on your device. Every modern browser provides settings to view, block, or delete stored data.

• Blocking essential cookies will prevent login and break the control panel.
• Clearing local storage will remove your interface preferences but does not affect your account or hosting infrastructure.
• Browser-specific instructions are available in each browser's documentation.

6. Do Not Track

Because we do not track users, Do Not Track signals are honoured by default. There is no cross-site tracking to disable and no behavioural profile to opt out of.

7. Consent

No cookie consent banner is presented because no tracking cookies are set. All cookies and storage items described above are strictly functional and are only set when you initiate the corresponding feature, such as logging in or adjusting your dashboard preferences.

8. Changes to This Policy

We may update this Cookie Policy to reflect changes in technology or regulation. Material changes will be indicated by a revised effective date at the top of this page. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

9. Contact

Questions about our use of cookies or browser storage can be directed to privacy@cloudysprout.com.