Privacy
Policy

Last updated: August 30, 2026

Effective date: August 30, 2026

This Privacy Policy explains how CloudyAgents, doing business as Cloudy Agents (“Cloudy Agents”, “we”, “us”, or “our”), collects, uses, stores, shares, and protects personal data when you use our websites, applications, desktop applications, AI agents, APIs, workspaces, and related services (collectively, the “Services”).

If you use Cloudy Agents from the European Economic Area (“EEA”), the United Kingdom, or another jurisdiction with applicable data-protection laws, additional rights may apply.

1. Who We Are

The controller of personal data processed through the Services is:

Legal name: CloudyAgents

Trading name: CloudyAgents / cloudyagents

General contact: support@cloudyagents.com

Where required by applicable law, we will identify the applicable data controller or representative for a particular processing activity.

2. Scope

This Privacy Policy applies to personal data processed when you:

• visit our websites;
• create or use a Cloudy Agents account;
• use our AI agents;
• create projects, workspaces, tasks, files, or other content;
• use our web, Mac, Windows, or other applications;
• communicate with us;
• subscribe to a paid plan;
• contact customer support;
• use APIs or integrations;
• participate in beta programs or research programs;
• interact with our marketing communications;
• otherwise use the Services.

This Privacy Policy does not apply to third-party websites, applications, AI models, integrations, or services that we do not control.

3. Personal Data We Collect

We collect only data that is reasonably necessary for the purposes described in this Privacy Policy.

3.1 Account Information

When you create an account, we may collect:

• name;
• email address;
• username;
• password or authentication credentials;
• profile information;
• account ID;
• subscription plan;
• account preferences;
• authentication and security information.

If you sign in using a third-party authentication provider, we may receive information that provider makes available to us according to your authorization and its privacy policy.

4. User Content

When you use Cloudy Agents, you may provide content such as:

• prompts;
• messages;
• instructions;
• project descriptions;
• source code;
• documents;
• images;
• videos;
• audio;
• files;
• URLs;
• datasets;
• generated content;
• agent configurations;
• workflows;
• tasks;
• project metadata;
• workspace information;
• other information you intentionally submit to the Services.

This information may contain personal data belonging to you or third parties.

You are responsible for ensuring that you have the necessary rights and permissions to provide such information to us and to instruct us to process it.

5. Automatically Collected Information

When you access the Services, we may automatically collect:

• IP address;
• approximate location derived from IP address;
• browser type;
• operating system;
• device type;
• application version;
• language;
• time zone;
• referring URL;
• pages or screens visited;
• features used;
• timestamps;
• crash reports;
• diagnostic information;
• performance information;
• security events;
• authentication events;
• API usage information;
• network information.

We may use this information for security, fraud prevention, debugging, analytics, service improvement, and operation of the Services.

6. Cookies and Similar Technologies

We may use cookies, local storage, SDKs, pixels, and similar technologies.

These technologies may be used for:

Strictly necessary purposes

For example:

• authentication;
• account security;
• session management;
• load balancing;
• fraud prevention;
• remembering essential settings.

Analytics

Where permitted by applicable law, we may use analytics technologies to understand:

• how users use the Services;
• which features are useful;
• performance problems;
• conversion and product usage.

Marketing

Where required by law, non-essential marketing technologies will only be used after obtaining the required consent.

You may manage non-essential cookies through our cookie-consent interface and, where applicable, through your browser settings.

We will not treat refusal of optional cookies as consent.

7. How We Use Personal Data

We may process personal data for the following purposes:

7.1 Providing the Services

Including to:

• create and maintain accounts;
• authenticate users;
• execute AI requests;
• operate AI agents;
• store projects and files;
• process prompts and inputs;
• produce requested outputs;
• maintain workspaces;
• execute workflows;
• provide integrations;
• synchronize applications;
• provide customer support.

7.2 Security

We may process information to:

• detect abuse;
• detect unauthorized access;
• prevent fraud;
• investigate security incidents;
• protect users and our infrastructure;
• enforce our Terms;
• prevent malicious activity.

7.3 Payments

Payments may be processed by third-party payment providers.

We generally do not store complete payment-card numbers.

Payment providers may process:

• billing name;
• billing address;
• payment information;
• transaction information;
• subscription information;
• tax information;
• fraud-prevention information.

The applicable payment provider's privacy policy also applies to its processing.

8. AI Processing

Cloudy Agents uses artificial intelligence systems and may use models provided by third-party AI providers.

Depending on the Service and the model selected by the user, user inputs may be transmitted to the applicable AI provider in order to generate an output.

These providers may include:

• OpenAI;
• Anthropic;
• Google;
• Moonshot AI / Kimi;
• other providers that we may make available.

The specific provider and model may depend on the user's configuration and the functionality being used.

Where Cloudy Agents allows the user to select a model or provider, the selected provider may receive the information necessary to process the request.

We do not represent that AI-generated outputs are accurate, complete, original, or suitable for a particular purpose.

9. AI Training

Default policy:

We do not sell your private prompts, projects, or files to third parties.

Unless expressly stated otherwise for a particular feature or program, we do not use private user content to train our own general-purpose AI models.

Third-party AI providers may have their own data-processing and retention policies. The applicable provider's terms and privacy documentation may therefore apply to information transmitted to that provider.

If we introduce a feature that uses user content for model training or similar purposes, we will provide the applicable disclosures and obtain consent where legally required.

10. Human Review

Some information may be accessed by authorized personnel when reasonably necessary to:

• provide customer support;
• investigate abuse;
• investigate security incidents;
• diagnose technical problems;
• comply with legal obligations;
• maintain the Services.

Access is limited according to our internal security and access-control procedures.

We do not routinely manually review private user content for general product monitoring.

11. Legal Bases for Processing in the EEA/UK

Where GDPR or equivalent legislation applies, we process personal data on one or more of the following legal bases:

Contract

Processing necessary to provide the Services you requested.

Legitimate interests

For example:

• security;
• fraud prevention;
• service improvement;
• internal administration;
• analytics where permitted;
• protection of legal rights.

We consider and balance our interests against your rights and freedoms.

Consent

Where legally required, such as certain non-essential cookies or marketing communications.

You may withdraw consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Legal obligation

Where processing is necessary to comply with applicable law.

12. Data Sharing

We may share personal data with:

Service providers

Including providers of:

• cloud infrastructure;
• databases;
• authentication;
• analytics;
• customer support;
• email;
• payment processing;
• security;
• AI inference;
• storage;
• monitoring;
• error reporting.

These providers are authorized to process personal data only as necessary to provide their services to us or as otherwise permitted by law.

AI providers

Where required to process your AI request.

Business transfers

If Cloudy Agents is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal data may be transferred as part of that transaction subject to applicable law.

Authorities and legal parties

We may disclose information where reasonably necessary to:

• comply with law;
• respond to valid legal requests;
• protect users;
• protect Cloudy Agents;
• investigate fraud or security incidents;
• establish or defend legal claims.

We do not sell personal data for money.

13. International Data Transfers

Cloudy Agents may use service providers located outside your country.

Where personal data is transferred outside the EEA/UK, we will use legally recognized safeguards where required, which may include:

• adequacy decisions;
• Standard Contractual Clauses;
• UK International Data Transfer mechanisms;
• appropriate supplementary safeguards;
• other legally recognized transfer mechanisms.

14. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• providing the Services;
• maintaining accounts;
• complying with legal obligations;
• resolving disputes;
• enforcing agreements;
• preventing fraud;
• maintaining security;
• maintaining backups.

Different categories of information may have different retention periods.

When information is no longer required, we may delete, anonymize, or securely isolate it.

Backup copies may remain for a limited period before being overwritten.

15. Account Deletion

You may request deletion of your account by contacting:

https://cloudyagents.com/privacy

Where available, you may also delete your account directly through the Services.

Deletion may not immediately remove information that we are legally required to retain or that is necessary for legal claims, security, fraud prevention, or legitimate business purposes.

16. Your Data Protection Rights

Depending on applicable law, you may have the right to:

• access your personal data;
• correct inaccurate personal data;
• request deletion;
• request restriction of processing;
• object to certain processing;
• receive certain personal data in a portable format;
• withdraw consent;
• object to direct marketing;
• lodge a complaint with a supervisory authority.

For users in the EEA, you generally have the right to lodge a complaint with the data protection authority in your country of residence, place of work, or where the alleged infringement occurred.

17. Automated Decision-Making

Cloudy Agents may use automated systems for:

• security;
• abuse detection;
• routing;
• service personalization;
• AI generation.

We do not intend to make solely automated decisions producing legal or similarly significant effects on individuals unless permitted by applicable law and subject to the safeguards required by that law.

18. Children's Privacy

The Services are not directed to children below the minimum age required by applicable law to independently consent to the processing of personal data.

Where applicable law requires parental or guardian authorization, users must obtain such authorization before using the Services.

We do not knowingly collect children's personal data in violation of applicable law.

If you believe a child has provided personal data to us without the required authorization, contact:

https://cloudyagents.com/privacy

19. Security

We use reasonable technical and organizational measures designed to protect personal data against:

• unauthorized access;
• unauthorized disclosure;
• alteration;
• destruction;
• accidental loss.

Security measures may include:

• encryption in transit;
• encryption at rest where appropriate;
• access controls;
• authentication controls;
• logging;
• monitoring;
• backups;
• least-privilege access;
• security reviews.

No internet service can guarantee absolute security.

20. Data Breaches

Where required by applicable law, Cloudy Agents will notify regulators and/or affected individuals of personal-data breaches within the legally required timeframe.

21. Third-Party Services

The Services may contain links to or integrations with third-party services.

We are not responsible for the privacy practices of third parties.

You should review the privacy policies of third-party services before using them.

22. Marketing Communications

We may send transactional communications necessary to operate your account.

Where required by law, marketing communications will be sent only with appropriate consent or another lawful basis.

You may unsubscribe from marketing communications at any time.

Transactional messages may continue where necessary to operate your account.

23. Do Not Track

The Services may not respond to all browser-based “Do Not Track” signals.

Where applicable law requires recognition of a particular privacy signal, we will process it in accordance with applicable law.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify users through the Services, by email, or through another legally appropriate method.

The “Last updated” date at the top indicates when this Privacy Policy was most recently changed.

25. Contact

For privacy questions, requests, or complaints:

Email: support@cloudyagents.com

Legal entity: CloudyAgents

26. Supervisory Authority

If GDPR applies to you, you have the right to lodge a complaint with a competent data-protection supervisory authority.

You may contact the authority in the country where you live, work, or where you believe your data-protection rights have been violated.

27. Version

Privacy Policy version: 1.0

Effective: August 30, 2026