Privacy Policy

1. Scope

This Privacy Policy describes how ADLAB Solutions, LLC ("CloudQuell", "we", "us", or "our"), a Utah limited liability company, collects, uses, discloses, and protects information when you ("you", "your", or "Customer") visit our website at cloudquell.com or use the CloudQuell platform and related services (collectively, the "Service"). CloudQuell is a product of ADLAB Solutions, LLC. By using the Service, you agree to this Policy.

2. Information we collect

We collect the following categories of information to operate the Service:

• ◦Account information: your name, work email address, organization name, billing details, and other information you provide when registering or contacting us.
• ◦Payment information: when paid billing is enabled, payments are processed by our payment processor (Stripe). CloudQuell does not store full payment-card numbers.
• ◦AWS environment metadata: AWS account IDs, account names, region identifiers, IAM role ARN, and the read-only permissions granted to CloudQuell. CloudQuell accesses your AWS environment exclusively through the cross-account IAM role you configure.
• ◦AWS Cost and Usage Report (CUR) data: line-item billing data, including service codes, resource identifiers (ARNs), usage types, regions, costs, and tags. This data is ingested from a CUR delivered to an S3 bucket you control.
• ◦Product usage information: dashboards visited, queries run, features used, and similar telemetry used to improve the Service. Where possible, this data is aggregated and not tied to an individual user.
• ◦Communications: messages you send to support, sales, and contact channels, including via the website chat widget.
• ◦Cookies and similar technologies: see Section 11 below.

3. What we do not collect

CloudQuell does not collect, ingest, or analyze:

• ◦The contents of your applications, databases, object stores, queues, logs, or production traffic.
• ◦Personal data belonging to your own customers or end users (other than the cost-attribution tags you choose to apply in AWS).
• ◦Any data outside the billing and usage metadata required to operate the Service.

4. How we use information

We use the information described above to:

• ◦Provide and operate the Service, including dashboards, reports, alerts, anomaly detection, and savings recommendations.
• ◦Authenticate users, secure your account, and prevent abuse.
• ◦Improve the Service, including training internal analytics models on aggregated and anonymized usage patterns.
• ◦Provide customer support and respond to your requests.
• ◦Communicate with you about the Service, product updates, security advisories, and (with your consent where required) marketing.
• ◦Comply with legal obligations and enforce our Terms of Service.

5. How we share information

We share information only in the following circumstances:

• ◦Sub-processors: we use vetted third-party service providers to host, secure, and operate the Service. The current list of sub-processors is published at /subprocessors and is updated when changes are made.
• ◦Legal compliance: we may disclose information when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of CloudQuell, our customers, or the public.
• ◦Business transfers: in the event of a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred to the relevant counterparty, subject to confidentiality obligations.
• ◦With your direction: we share information at your written direction (for example, when you ask us to provision an integration or invite a user).

We do not sell your data. We do not use Customer Data for advertising.

6. Data retention

We retain different categories of data for different periods:

• ◦AWS CUR and analytics data: retained for the period defined by your subscription tier (see /pricing for the current retention bands).
• ◦Account data: retained while your account is active and for up to 90 days after termination, after which it is deleted from our active systems.
• ◦Backups: retained for up to 30 days following deletion from active systems.
• ◦Aggregated and anonymized data: may be retained indefinitely for analytics and product improvement purposes.
• ◦Legal holds: data subject to a legal hold or required by law to be retained will be kept for the period required.

7. International data transfers

CloudQuell is operated from the United States and stores Customer Data in AWS data centers located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.

8. Your rights and choices

Depending on where you live and applicable law, you may have the following rights regarding your personal information:

• ◦Access: request a copy of the personal data we hold about you.
• ◦Correction: request correction of inaccurate or incomplete data.
• ◦Deletion: request deletion of your personal data, subject to legal retention obligations.
• ◦Portability: request a copy of your data in a structured, commonly used format.
• ◦Objection / restriction: object to or restrict certain processing.
• ◦Withdraw consent: where we rely on consent, withdraw it at any time.
• ◦Lodge a complaint: file a complaint with your local data-protection authority.

To exercise any of these rights, email privacy@cloudquell.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.

9. California privacy rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of certain "sales" or "sharing" of personal information. CloudQuell does not sell personal information as defined by California law. To exercise CCPA rights, email privacy@cloudquell.com with the subject "California Privacy Request".

10. Children's privacy

The Service is not directed to children under 16 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@cloudquell.com and we will delete it.

11. Cookies and tracking

We use a small number of cookies and similar technologies to operate the Service: an authentication cookie that keeps you signed in, a preferences cookie that remembers your display settings, and minimal first-party analytics to understand product usage. We do not use third-party advertising cookies. You can disable cookies in your browser, but parts of the Service may not function correctly without them.

12. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS 1.3) and at rest (AES-256), least-privilege access controls, audit logging, and regular security review. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. See www.cloudquell.com/security for more detail.

13. Changes to this policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated by email to the account owner and posted on this page with an updated Effective Date at least 30 days before they take effect. Continued use of the Service after changes become effective constitutes acceptance.

14. Contact

Questions about this Policy or our privacy practices can be directed to:

• ◦Email: privacy@cloudquell.com
• ◦Mail: ADLAB Solutions, LLC — registered address available on request