Privacy Policy

1. Data Controller and Scope

CloudStore Platforms B.V., located at Keizersgracht 520, 1017 EK Amsterdam, The Netherlands (KvK: 74209183) ("CloudStore," "we," or "us"), acts as the Data Controller under the General Data Protection Regulation (EU) 2016/679 ("GDPR") for personal data collected through our website, billing systems, and support channels. This policy does not apply to the "Customer Data" (the contents of objects) stored within our infrastructure, for which CloudStore acts solely as a Data Processor.

2. Information Collection and Processing

• Account & Identity Data: Full legal name, corporate email address, organizational role, and corporate billing details necessary for contract execution (Art. 6(1)(b) GDPR).
• Telemetry & Infrastructure Data: Cryptographic API request signatures, access logs, IP addresses, and latency metrics to ensure the operational integrity and security of the Service (Art. 6(1)(f) GDPR).
• Content Blindness: We employ Zero-Knowledge Encryption architectures. We do not inspect, log, or algorithmically process the contents of tenant storage buckets under any circumstances.

3. Data Retention and Sovereignty

Financial and corporate identity records are maintained for a mandatory period of seven (7) years to comply with Dutch Tax and Customs Administration (Belastingdienst) requirements (Art. 6(1)(c) GDPR). Transient infrastructure logs are permanently purged after 90 days. All processing and storage of EU citizen data is strictly confined to physical data centers located within the European Economic Area (EEA), guaranteeing absolute data sovereignty.

4. Enterprise Rights and Disclosures

Data Subjects retain full rights to access, rectification, erasure ("Right to be Forgotten"), and portability. Law enforcement requests are strictly denied unless accompanied by a binding subpoena or court order issued by a competent jurisdiction within the European Union.