1. Introduction
This Privacy Policy describes how CloudAxis Labs LLC (“CloudAxis,” “we,” “us,” or “our”), a United States company with its registered office at 30 N Gould St, STE R, Sheridan, WY 82801, USA, collects, uses, discloses, and protects information in connection with our product CloudAxis (the AI cloud computer that runs your work on autopilot) and related websites and services (collectively, the “Services”).
By using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.
For privacy-related questions, contact privacy@cloudaxis.ai.
2. Information we collect
2.1 Information you provide
When you create an account, subscribe to a plan, contact support, use AI features, or connect third-party services, we may collect:
- Name (if provided)
- Email address
- Account credentials (stored in hashed form)
- Billing information (processed by our payment provider; we do not store full payment card details)
- Content you submit (e.g. messages, prompts)
- Files you upload to your workspace
- Connected-account settings, OAuth tokens, or account identifiers where you choose to connect third-party services
- Scheduled-task, workflow, automation-consent, and publishing-mode records where you create or deploy automations
2.2 Content and files
We collect content you create, upload, or store in CloudAxis, including messages, drafts, files, and similar materials needed to provide the Services.
2.3 AI inputs and outputs
We process prompts you submit, content generated by AI, and workflow/conversation data related to your use. CloudAxis chat uses OpenAI GPT-5.6 Luna only (including Gmail, Calendar, and Search Console when you connect them). There is no user-facing model picker. DeepSeek is not used for CloudAxis chat or Google Workspace data. DeepSeek is used only by Glimeo, a separate demo-video product that takes a user-provided website URL and does not access Gmail, Google Calendar, or Search Console APIs. Those providers process data under their own terms and privacy policies. We do not use your content to train third-party foundation models. You are responsible for ensuring that content you submit complies with laws and third-party rights. See our Subprocessors page for a current list.
2.4 Cloud browser features (if enabled)
If you use optional cloud-based browser workspace features: session identifiers and context IDs may be stored; authentication tokens may be processed through secure third-party infrastructure providers. We do not intentionally store raw login credentials for third-party platforms. Browser session data may be processed by third-party infrastructure providers in accordance with their policies.
2.5 Usage and analytics
When you use the Service, we may collect IP address, device and browser type, usage logs, timestamps, and feature interaction data. This helps us maintain security, operate the Service, and improve functionality.
On the cloudaxis.ai marketing website, we use Google Analytics 4 to measure aggregate traffic (e.g., page views and referral sources). GA4 loads only after you consent via our cookie banner. We configure GA4 with consent mode and do not use it for cross-site advertising on this site. For cookie details, see our Cookie Policy.
2.6 Data from connected third-party accounts (Google, Meta, and others)
When you connect third-party accounts, we receive information authorized by you through that provider’s consent and OAuth flow:
- Gmail (mailbox): If you connect Gmail via Launchpad (app drawer) → Email → Connect, we may access message metadata, bodies, and attachments, and compose, send, mark as read, or move messages to trash only when you direct the assistant in chat. See §4 Google Workspace user data.
- Google Calendar: If you connect Google Calendar via Launchpad → Calendar → Connect, we may list, create, update, or delete events only when you direct the assistant in chat. See §4 Google Workspace user data.
- Instagram Business: We may access profile information, media (e.g., posts and stories as permitted), insights and analytics, and the ability to publish content on your behalf, only as needed to provide features you use.
- Facebook Page: We may access Page information, the ability to publish posts, and Page engagement insights, as authorized.
- WhatsApp Business (Cloud API): We may access your WhatsApp Business profile information as needed and send messages you have opted into (e.g., notifications and digests).
We access only data reasonably necessary to provide the Services you request.
3. How we use your information
We use information to:
- Provide, maintain, and improve the Services;
- Publish content to connected accounts when you direct us to;
- Deliver notifications and messages you have opted into;
- Display engagement analytics in the product;
- Secure the Services, prevent abuse, and comply with law;
- Communicate with you about the Services and policy changes.
We do not use your content to train third-party foundation models. We do not sell your personal information to data brokers.
Where privacy laws require a legal basis, we process personal information based on performance of our contract with you (providing the Service), our legitimate interests (security, abuse prevention, service reliability and improvement), compliance with legal obligations, and your consent where required (for example non-essential analytics cookies, connected third-party channels, or proactive messaging).
4. Google Workspace user data (Gmail, Calendar, and AI)
If you connect Gmail or Google Calendar on app.cloudaxis.ai or cloudybot.ai (same backend), we access those accounts only through Google OAuth and the scopes you approve.
4.1 What we access and how we use it
Gmail (gmail.modify): message metadata, bodies, and attachments as needed; compose, send, mark read, or move messages to trash only when you instruct the assistant in chat.
Google Calendar (calendar): event details; list, create, update, or delete events only when you instruct the assistant in chat.
We do not use Google Workspace data for advertising, sell it, or transfer it to data brokers. Human access is limited to security, abuse prevention, legal compliance, or support when you request help. You can disconnect anytime in Launchpad → Email or Calendar; we delete OAuth tokens and stop accessing the account, except where limited retention is required by law or security.
4.2 Google Workspace data and third-party AI
CloudAxis is an AI assistant. When you ask a chat question that requires Gmail or Calendar context, we may include the minimum relevant content from Google’s APIs in a request to a third-party LLM API provider only to generate your response for that request.
We use commercial API inference only (not self-hosted or offline models for Google Workspace data). Google Workspace user data is sent only to OpenAI (GPT-5.6 Luna / ChatGPT). CloudAxis chat does not use DeepSeek. DeepSeek is used only by Glimeo, a separate demo-video product that takes a user-provided website URL and does not access Gmail, Google Calendar, or Search Console APIs. See our Subprocessors page.
We do not use raw, aggregated, anonymized, or derived Google Workspace API user data to create, train, or improve foundational or generalized AI/ML models. We do not transfer Google Workspace data to third-party AI services for training purposes.
CloudAxis’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Data from Meta platforms
We use Meta’s Graph API, Instagram APIs, and WhatsApp Cloud API where applicable to provide social media publishing, analytics, and messaging features within CloudAxis.
- Data obtained through Meta APIs is used solely to provide the Services described in this policy.
- We do not use data obtained through Meta APIs for purposes unrelated to providing and improving CloudAxis’s features described to users.
- We do not transfer Meta platform data to data brokers, advertising networks, or unrelated third parties.
- You can revoke CloudAxis’s access to your Meta-connected accounts through your CloudAxis dashboard settings and through Meta’s app and account settings.
6. Data sharing
We may share data with: cloud hosting providers; AI and model infrastructure providers; browser infrastructure providers; payment processors; email delivery providers; messaging platform providers when you connect them; and legal or regulatory authorities when required by law. We do not sell personal information to third parties. A list of key subprocessors is on our Subprocessors page.
7. Third-party services
CloudAxis may integrate with or link to third-party services. Your use of those services is subject to their own privacy policies. We are not responsible for the privacy practices of third-party platforms.
8. Data retention and deletion
We retain personal data only as long as necessary to provide the Service, comply with legal obligations, and resolve disputes or enforce agreements. Conversation history may be retained according to your plan (for example from 7 days to unlimited as described at signup). Account profile and workspace files remain until you delete them or delete your account. Automation consent records are retained while your account exists so we can prove the configuration and consent for scheduled workflows; they are deleted with your account unless we are legally required to preserve related records. You may request account and data deletion from dashboard settings or by contacting us. Operational logs may be retained for security and abuse prevention (typically up to one year unless a longer period is required by law). Certain billing-related, legal, security, abuse-prevention, or safety records may be retained longer where required or permitted by law.
When you disconnect a Meta-connected account, we delete associated access tokens and cease accessing that account’s data through CloudAxis, except where we must retain limited records for security, legal compliance, or backup cycles as described in our processes.
9. Data security
We implement reasonable administrative, technical, and organizational safeguards to protect personal data. No system is completely secure, and we cannot guarantee absolute security.
10. Your rights
You may request access, correction, or deletion of your personal information, and export your data from the dashboard where available. Depending on your location, you may also have rights to object to or restrict certain processing, withdraw consent where consent is the basis for processing, and lodge a complaint with your local data protection authority. To exercise rights, contact privacy@cloudaxis.ai. We may verify your identity before fulfilling requests.
11. U.S. state privacy rights
CloudAxis Labs LLC is a U.S. company. Depending on where you live, state laws (including California’s CCPA/CPRA) may give you rights to know what personal information we collect, to request deletion, and to opt out of certain types of sharing. We do not sell personal information for money as that term is commonly understood. To exercise rights, contact privacy@cloudaxis.ai (use a clear subject line, e.g. “Privacy request” or “California privacy rights”). We may verify your request before responding.
11.1 California residents (CCPA/CPRA)
If you are a California resident, you may have the right to request access to categories and specific pieces of personal information we have collected about you, to request deletion of personal information subject to exceptions, and to opt out of “sale” or certain “sharing” of personal information. We do not sell personal information as defined under the CCPA. You may designate an authorized agent to make a request on your behalf where permitted by law. We will not discriminate against you for exercising these rights. To submit a request, contact privacy@cloudaxis.ai with “CCPA request” in the subject line.
12. International processing
We are based in the United States. Our service providers may process data in the United States or other countries where they operate (including hosting in Germany and other regions listed on our Subprocessors page). By using the Service, you understand that your information may be processed outside your home state or country.
13. Cookies and similar technologies
We use cookies and local storage for authentication, preferences, consent records, and (with your consent) analytics and advertising measurement on our marketing site and app. Details are in our Cookie Policy.
14. Children’s privacy
CloudAxis is not intended for individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us and we will take steps to remove it.
15. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the effective date. Where required, we will provide additional notice (e.g., email or in-product notice).
16. Contact
CloudAxis Labs LLC
30 N Gould St, STE R
Sheridan, WY 82801
USA
Privacy inquiries: privacy@cloudaxis.ai