Last updated: 2026-07-14
CloudForge Team — Owner François Alexandre De Lattre Address: Vorarlberg, Austria E-Mail: hello@cloudforge.team Responsible for the processing of your personal data on this website.
Please direct privacy requests to: privacy@cloudforge.team
We process the following categories of personal data: - Account data: name, email address, password (hashed), company name, role - Payment data: handled by Stripe (we do not store credit card numbers) - Usage data: login times, IP address, browser type (server logs, 7-day retention) - Customer data you upload via the CloudForge Agent: infrastructure metadata, container inventory, findings - Support inquiries: content of your support requests
We process your personal data for the following purposes: - Service provision and operation (Art. 6 (1) (b) GDPR — contract performance) - Customer support (Art. 6 (1) (b) GDPR) - Billing (Art. 6 (1) (b) GDPR) - Security monitoring and abuse prevention (Art. 6 (1) (f) GDPR — legitimate interest) - Legal compliance (Art. 6 (1) (c) GDPR — legal obligation)
We share your data with the following categories of recipients: - Sub-processors (see DPA Section 8): hosting, payment processing, email delivery - Authorities: only upon binding legal request - Other third parties: only with your explicit consent We never sell your personal data.
We store your personal data only as long as necessary for the purposes stated above or as required by law: - Account data: duration of contract + 30 days - Server logs: 7 days - Audit logs: 365 days - Tax-relevant documents: 7 years (Austrian tax law)
You have the right to: - Access (Art. 15 GDPR) - Rectification (Art. 16 GDPR) - Erasure (Art. 17 GDPR) - Restriction of processing (Art. 18 GDPR) - Data portability (Art. 20 GDPR) - Object to processing (Art. 21 GDPR) - Lodge a complaint with a supervisory authority (Art. 77 GDPR) To exercise these rights, contact privacy@cloudforge.team.
We protect your data with industry-standard security measures: - TLS 1.3 encryption in transit - AES-256 encryption at rest - Mandatory MFA for admin roles - Database credentials rotated every 90 days - Daily encrypted backups with 30-day retention - Annual penetration testing
We use only essential cookies (session, CSRF, locale) that are required for the website to function. We use Plausible Analytics, a privacy-friendly analytics service that does not use cookies and does not collect personal data. We do not use any marketing or advertising cookies.
We may update this privacy policy from time to time. The current version is always available at https://cloudforge.team/de/privacy. Material changes will be communicated via email to registered users.