CloudWho we are
This website is run by Cloud Future Automation Research Matrix Private Limited (CloudFARM), a company registered in Nepal (company registration 394415/82/83), with its registered office in Budhanilkantha Municipality, Ward 6, Kathmandu. We decide how the personal data described here is used. Write to tech@cloudfrm.ai about anything in this notice.
What you give us when you contact us
The contact form asks for your name, your email address, what describes you (developer, startup, enterprise, research, creator, partner, investor or press), your organisation and your country or region where the form asks for them, and your message. We store them with a reference, a priority and the time you wrote.
The form accepts enquiries only once this notice is in effect; until then it asks you to email us instead. When it accepts one, we send you one automatic reply and our team one alert, both by email. Where our team’s internal chat channel is connected, an enquiry you mark as a security review is posted there as well.
The site’s older enquiry forms — the waitlist, the allocation request and the partner application — are switched off, and nothing sent to them now is stored. What was sent through them before they were switched off is still held, and everything in this notice applies to it.
What we collect automatically
- Your IP address, which form or tool you used and when, so that we can limit how often one address submits. These records are deleted once they are older than an hour, the next time that limit is checked.
- The records the hosting platform keeps of every request, including the address it came from. Our own logs record a request id, the page or route, the result and the timing, and remove addresses, email addresses and credentials.
- Measurements of how quickly pages load, combined per page, with no address and no identifier, on the live site only. We keep them for 90 days.
Accounts
Registration for the developer platform is closed while the platform is on a waitlist. Where an account exists, we keep its email address, a hash of its password (never the password itself), an optional display name, its organisations and invitations, and a record of sign-ins and security events. For each session we keep a shortened form of the IP address and the browser’s description of itself. A session ends after 30 days at most.
Staff sign in with a Google account and a second factor; we keep the staff member’s email address, the second factor’s secret (encrypted) and their recovery codes (as hashes).
Cookies and browser storage
We set cookies only to keep you signed in, and staff sign-in sets a few more while it runs. Your browser also remembers your light or dark choice and whether you dismissed the homepage film’s welcome screen. There are no analytics, advertising or tracking cookies. The cookies notice lists each one.
Who else handles your data
- Vercel hosts and runs the website, so every request passes through it.
- Google Fonts serves the icon font every page loads, so your browser sends it your IP address and details of the browser.
- Supabase Storage serves the films and short loops on the pages that show them, and receives the same details.
- Our email provider delivers the automatic reply and our team’s alert.
- Our database host stores what this notice describes.
- Google handles our staff’s sign-in, and nothing of yours.
- Slack receives our team’s alert for an enquiry marked as a security review, where that channel is connected. It is the only enquiry the contact form can produce that is sent there.
Error monitoring is built into the site but switched off. This notice will name the service before it is switched on.
Why we use it
To answer the enquiry you sent us; to keep the forms and the site safe from abuse; and, for an account, to provide what it was opened for. We do not sell personal data and we do not use it for advertising.
How long we keep it
Rate-limiting records are removed once they are more than an hour old and the limit is next checked, email duplicate checks after a day, and page-speed measurements after 90 days. Enquiries and accounts have no set end date yet: they are kept until you ask us to delete them. Security records have no set end date either. Setting these periods is part of the review of this notice.
Your choices
You can ask us what we hold about you, and ask us to correct or delete it, by writing to tech@cloudfrm.ai. We reply from that address. Depending on where you live, you may have further rights, including the right to complain to a data protection authority.
Changes to this notice
This notice is a draft under legal review and is not yet in effect. When it takes effect, its date appears at the top of this page, and each later change shows a new date.