Privacy Policy
This Privacy Policy explains what personal data CloudArch collects, why we collect it, and how we use and protect it. By using the service, you agree to this policy.
Data controller
The data controller is LLC "LAMP LABS" (ООО «ЛЭМП ЛЭБС», INN 9714031466, OGRN 1237700942533, registered address: 125167, Moscow, Khoroshevsky municipal district, Leningradsky Prospekt, building 47, structure 2, premises 13A, Russian Federation). For any privacy-related questions, contact us at privacy@cloud-arch.ru or support@cloud-arch.ru.
What data we collect
- Account data: email address, username, full name (optional), avatar URL.
- Authentication data: password hash, OAuth identifiers (Google, GitHub, Yandex), session tokens, API keys.
- Content you create: scripts, comments, collections, stars, and related metadata.
- Technical data: IP address, user-agent, request timestamps, audit logs of significant actions.
- Analytics data (only if you accept analytics cookies): aggregated usage statistics via Yandex Metrica.
- Billing data: payment identifier, subscription identifier, saved payment method token, amount, currency, status, and email for fiscal receipts. Full card details are never transmitted to or stored by us.
How we use your data
- Authenticate you and keep you signed in.
- Provide and improve the service: store your scripts, render diagrams, deliver collaboration features.
- Detect abuse, prevent fraud, and keep audit logs for security investigations.
- Send transactional emails such as email verification and password reset.
- Understand aggregate usage patterns to improve the product (only with your consent).
- Perform the paid services contract: charge payments, process recurring renewals, issue fiscal receipts, handle refunds, and meet accounting and tax obligations.
Legal basis
We process personal data based on your consent (given at sign-up and via the cookie banner), to perform the contract between you and the controller when you use the service, and to comply with the controller's legal obligations under the laws of the Russian Federation (Federal Law No. 152-FZ "On Personal Data" of 27.07.2006; Federal Law No. 54-FZ "On the Use of Cash Registers" of 22.05.2003) and, where applicable, Regulation (EU) 2016/679 (GDPR).
Cookies
- Essential cookies: required for authentication and core functionality. They cannot be disabled.
- Preference cookies: store your language and theme choice.
- Analytics cookies: optional, set only if you click "Accept all" in the cookie banner. Used by Yandex Metrica.
Sub-processors
To deliver the service, we engage the following sub-processors under contractual obligations and applicable legal requirements:
- LLC CloudPayments (ООО «КлаудПэйментс») — card and recurring payment processing. Card data is transmitted directly to the processor and handled under the PCI DSS standard.
- Yandex LLC (Yandex.Metrika) — product analytics. Loaded only after you explicitly accept analytics cookies.
- Transactional SMTP provider — delivery of system emails (email confirmation, password reset, receipts, payment notifications).
Sharing with third parties
We do not sell your personal data. Limited data may be shared with infrastructure providers (hosting, email, OAuth, payment processing, analytics) strictly to operate the service. Data may be disclosed to competent state authorities upon a lawful request as required by applicable law.
Data retention
Account data is retained while your account is active. You can request deletion at any time. Audit logs may be retained for up to 12 months for security purposes. Payment data and fiscal receipts are retained for the periods required by Russian tax legislation (no less than 5 years from the date of the transaction).
Your rights
You can access, correct, export, or delete your personal data, withdraw consent, and lodge a complaint with the relevant supervisory authority. In the Russian Federation, the supervisory authority for personal data protection is Roskomnadzor. To exercise these rights, contact us at the email below.
Security
We use industry-standard measures to protect your data, including TLS encryption in transit and password hashing at rest.
Children
CloudArch is not directed at children under 16. If you believe a child has provided us personal data, contact us and we will delete it.
Applicable regulation
Personal data is processed in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and other regulatory acts of the Russian Federation, and — where applicable — under Regulation (EU) 2016/679 (GDPR) with respect to data subjects located in the European Economic Area.
Changes to this policy
We may update this policy. Significant changes will be announced in-app or via email. The "Last updated" date at the top reflects the latest revision.
Contact
For privacy questions or requests, write to: privacy@cloud-arch.ru
Controller contacts and legal details
- Legal name: Limited Liability Company "LAMP LABS" / Общество с ограниченной ответственностью «ЛЭМП ЛЭБС»
- INN (Taxpayer ID): 9714031466
- KPP: 771401001
- OGRN: 1237700942533
- Registered address: 125167, Moscow, Khoroshevsky municipal district, Leningradsky Prospekt, building 47, structure 2, premises 13A, Russian Federation
- Support email: support@cloud-arch.ru
- Privacy email: privacy@cloud-arch.ru