Privacy Policy

1. Data We Collect

We collect the following categories of personal data:

• Account Data: Name, email address, username, password (hashed)
• KYC Data: Full legal name, Tax Identification Number (TIN), country, government-issued ID, facial photograph
• Payment Data: PayPal email, Stripe account, or bank account details
• Usage Data: Task submissions, login times, device type, IP address
• Communications: Support emails and messages sent via the contact form

2. How We Use Your Data

Your data is used exclusively for:

• Operating and improving the CloudCaarl platform
• Processing task submissions and payments
• Verifying your identity for KYC compliance
• Communicating platform updates, policy changes, and submission results
• Fraud prevention and security monitoring

3. Data Storage & Security

All personal data is stored on Supabase infrastructure with AES-256 encryption at rest. KYC documents are stored in private, restricted-access storage buckets. Payment details are stored encrypted and never transmitted in plain text. We employ role-based access controls — only authorized admins can view sensitive user data.

4. Third-Party Services

We use the following third-party services which may process your data:

• Supabase: Database, authentication, and file storage
• PayPal / Stripe: Payment processing (subject to their own privacy policies)

5. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing where applicable

To exercise any of these rights, contact us at support@cloudcaarl.com.

6. Data Retention

We retain your account data for as long as your account is active. KYC records are retained for 5 years after account closure in compliance with financial regulations. Transaction records are retained for 7 years.

7. Cookies

CloudCaarl uses only functional cookies required for authentication and session management. We do not use tracking, advertising, or analytics cookies.

8. Changes to This Policy

We will notify you of significant changes via email at least 14 days before they take effect. Continued use of CloudCaarl after the effective date constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions or data requests, contact us at support@cloudcaarl.com. We will respond within 48 business hours.