Privacy Policy

Cloudy24 Privacy Policy

Effective date: 01 April 2026

This Privacy Policy ("Policy") describes how Cloudy24 ("Cloudy24", "we", "us", or "our"), operated by Cloudy24.com, collects, uses, stores, and protects personal information when you visit our website (cloudy24.com) or use any of our hosting, domain, or related services. This Policy supersedes all previous versions and applies to all customers, visitors, and users of Cloudy24 services.

By accessing our website or purchasing any service, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please discontinue use of our services and contact us to close your account.

1. Definitions

"Cloudy24" / "We" / "Us" — Cloudy24.com and its operators.
"You" / "Customer" / "User" — Any individual or entity accessing our website or using our services.
"Personal Data" — Any information that can directly or indirectly identify a natural person (name, email, IP address, payment details, etc.).
"Services" — Web hosting, domain registration, email hosting, SSL certificates, and all other products offered by Cloudy24.
"Sensitive Personal Data" — As defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including financial information, passwords, and health data.

2. Information We Collect

We collect information in the following categories:

a) Account & Identity Information

Full name, email address, phone number, and mailing address provided during registration or purchase.
GST number or PAN (where applicable for Indian business customers).
Domain names registered or transferred through us.

b) Billing & Payment Information

Payment method details (credit/debit card, UPI, net banking) processed securely through our payment gateways (Paytm, PhonePe, Google Pay, FreeCharge, or others).
Transaction history, invoice records, and refund details.
We do not store full card numbers on our servers. Payment processing is handled by PCI-DSS compliant third-party processors.

c) Technical & Usage Data

IP address, browser type, operating system, referring URL, pages visited, and time spent on our website.
Server access logs, error logs, and resource usage data associated with your hosting account.
Support ticket content, live chat transcripts (via Zoho SalesIQ), and email correspondence.

d) Communications Data

Messages sent to us via contact forms, WhatsApp, or email.
Feedback, reviews, or survey responses you provide voluntarily.

3. How We Use Your Information

We use collected information for the following purposes:

Service Delivery: To provision, manage, and maintain your hosting account and all purchased services.
Billing & Payments: To generate invoices, process payments, issue refunds, and send payment reminders.
Customer Support: To respond to support tickets, live chat queries, and technical issues.
Security: To detect fraud, prevent abuse, and protect our infrastructure and customers from unauthorized access.
Communications: To send transactional emails (service notices, invoices, renewal reminders) and, with your consent, promotional newsletters. You may opt out of marketing communications at any time.
Compliance: To comply with applicable laws, court orders, and regulatory requirements.
Improvement: To analyze usage patterns and improve our website, products, and services.

4. Legal Basis for Processing

We process your personal data under the following legal bases, in accordance with the Information Technology Act, 2000 (as amended), the IT (Amendment) Act, 2008, the SPDI Rules 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act):

Contract performance: Processing necessary to fulfill our service agreement with you.
Consent: For marketing communications and optional data uses where we seek your explicit consent.
Legal obligation: Where processing is required by applicable law or regulatory authority.
Legitimate interest: For security, fraud prevention, and service improvement, balanced against your rights.

5. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored in your browser that help us recognize returning visitors, save preferences, and analyze website traffic.

Types of cookies we use:

Strictly Necessary: Required for login sessions and core website functionality.
Functional: Remember your preferences (language, region, display settings).
Analytics: Collect aggregated, anonymized data about how visitors use our site (page views, referral sources, etc.).
Third-Party: Set by services like Zoho SalesIQ for live chat functionality.

You may disable cookies through your browser settings. Note that disabling cookies may affect the functionality of certain parts of our website, including the customer portal.

6. Log Files

Our servers automatically record standard log data, including IP addresses, browser information, referring pages, date and time of access, and pages visited. This data is used for security monitoring, infrastructure management, abuse prevention, and aggregate traffic analysis. Log data is retained for a period of 90 days for operational purposes and up to 3 years where required for legal compliance or security investigations. IP addresses are not linked to personally identifiable information in routine analytics.

7. Third-Party Services

We engage the following categories of third-party service providers who may receive or process your personal data on our behalf. All such providers are bound by data processing agreements and applicable law:

Billing Platform: Zoho Invoice / Zoho Billing — for invoice generation, subscription management, and payment processing.
Live Chat & CRM: Zoho SalesIQ and Zoho CRM — for customer support, chat, and account management.
Payment Gateways: Paytm, PhonePe, Google Pay, FreeCharge, and other RBI-regulated payment processors for secure transaction handling.
Communication: WhatsApp Business API for support messaging (subject to WhatsApp's Privacy Policy).
Infrastructure: Data center and network providers for server colocation and connectivity.

We do not sell your personal data to third parties. We do not share your data with advertisers or data brokers.

8. Data Retention

We retain your personal data for as long as your account is active or as required to provide services. Specifically:

Account data: Retained for the duration of your account and for 3 years after account closure for legal and financial audit purposes.
Billing records: Retained for 7 years as required under Indian tax and accounting laws.
Support records: Retained for 2 years after ticket closure.
Server access logs: Retained for 90 days, extended up to 3 years for security investigations.
Marketing consent records: Retained for the period of consent or until withdrawn.

After applicable retention periods, data is securely deleted or anonymized.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws, you have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
Right to Grievance Redressal: Raise a complaint with our Grievance Officer (see Section 15).
Right to Withdraw Consent: Withdraw consent for marketing or optional data processing at any time without affecting prior lawful processing.
Right to Nominate: Nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, log in to your account at app.cloudy24.com or contact our Grievance Officer at legal@cloudy24.net. We will respond to verified requests within 30 days.

10. Security & Protection

We implement industry-standard security measures to protect your personal data from unauthorized access, loss, misuse, or disclosure:

SSL/TLS encryption for all data transmitted between your browser and our servers.
Secure, access-controlled data centers with physical and electronic safeguards.
Role-based access controls ensuring only authorized staff can access customer data.
Regular security audits, vulnerability assessments, and patching procedures.
PCI-DSS compliant payment processing — we do not store raw card data on our systems.

In the event of a data breach that is likely to result in a risk to your rights, we will notify affected individuals and the relevant authority as required under the DPDP Act, 2023.

11. Customer-Hosted Data

As a web hosting provider, Cloudy24 stores files, databases, emails, and other content on behalf of its customers. This Policy covers only data Cloudy24 collects directly from customers for service and billing purposes. Data that customers store on their hosting accounts is governed by the customer's own privacy policy and their obligations under applicable law. Cloudy24 does not access, review, or process customer-hosted content except as necessary for support, abuse investigations, or legal compliance. Customers are solely responsible for the data they host on Cloudy24 infrastructure and must ensure their own compliance with applicable data protection laws.

12. Opt-Out & Marketing Preferences

You will automatically receive transactional communications, including invoices, renewal notices, and critical service alerts. These cannot be opted out of as they are essential to the operation of your account. You may opt out of promotional newsletters and marketing emails at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us at legal@cloudy24.net.

13. Law Enforcement & Legal Disclosure

Cloudy24 cooperates with Indian government authorities, law enforcement agencies, and courts as required by law. We may disclose personal data when required by a valid legal order, court subpoena, government directive, or when we reasonably believe disclosure is necessary to: (a) comply with applicable law; (b) protect the safety of any person; (c) prevent or investigate illegal activity, fraud, or abuse; or (d) protect the rights and property of Cloudy24 or third parties. We will, where legally permitted, notify affected customers of such requests before disclosure.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. The revised Policy will be posted on this page with an updated effective date. For material changes, we will notify customers via email or a prominent notice on our website at least 7 days before the changes take effect. Your continued use of our services after the effective date constitutes acceptance of the revised Policy.

15. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address concerns related to your personal data.

Name: Grievance Officer, Cloudy24
Email: legal@cloudy24.net
Website: cloudy24.com

Complaints will be acknowledged within 48 hours and resolved within 30 days. If your concern is not resolved to your satisfaction, you may escalate to the Data Protection Board of India once it is constituted under the DPDP Act, 2023.