1. Introduction
DOCXCLOUD TECHNOLOGIES PRIVATE LIMITED ("DOCXCLOUD," "we," "us," or "our") is committed to protecting the privacy and security of your data. This Privacy Policy describes how we collect, use, and share information when you use our cloud financial management platform, website, and related services (collectively, the "Services").
As a provider of enterprise infrastructure optimization tools, we understand the sensitivity of your cloud architectural data. This policy outlines our standards for handling information across multi-cloud environments including AWS, Azure, and Google Cloud Platform (GCP).
2. Information We Collect
To provide high-stakes cloud optimization, we collect several types of information:
-
cloud_sync
Cloud Account Metadata: Through read-only API access, we collect inventory data, usage metrics, and billing records from your AWS, Microsoft Azure, and Google Cloud accounts.
-
person
Account Information: Name, professional email address, organization name, and role-based access credentials provided during enterprise onboarding.
-
monitoring
Usage Data: Technical logs of how your team interacts with our dashboard, including navigation patterns and feature utilization.
3. How We Use Information
We process your information for the following business purposes:
Cost Optimization
Analyzing usage trends to provide actionable recommendations for rightsizing, spot instance utilization, and reserved instance planning.
Security Auditing
Identifying governance gaps and security misconfigurations in your cloud infrastructure that could lead to financial or data leakage.
4. Data Security
Security is the bedrock of DOCXCLOUD. We implement enterprise-grade measures to protect your metadata:
All data is encrypted in transit using TLS 1.3 and at rest using AES-256. We maintain strict SOC 2 Type II compliance and conduct annual third-party penetration testing.
We utilize IAM roles with "least-privilege" read-only access to your cloud environments, ensuring we never have the capability to modify or delete your production resources.
5. Your Rights
Depending on your jurisdiction (such as GDPR in Europe or CCPA in California), you may have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Correct inaccurate or incomplete information.
Request erasure of data when no longer necessary.
6. Contact Us
If you have any questions about this Privacy Policy or our data practices, please reach out to our dedicated Data Protection Officer.