CloudBooster

Privacy Policy

What You Should Know About Our Privacy Practices, Data Protection Measures, and Your Rights

Last updated: 31. 3. 2026

1. Introduction

CloudBooster ("we", "our", or "us") values the privacy of our customers. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform and services. By using CloudBooster, you agree to the terms outlined in this policy.

This Privacy Policy is part of and subject to our Terms and Conditions, available at cloudbooster.io/terms.

CloudBooster provides two types of services, and this policy covers both:

  • Platform Services: The CloudBooster SaaS platform for autonomous cloud management, accessed via cloudbooster.io.
  • Professional Services: Cloud consulting, migration, and hands-on infrastructure management engagements, provided under separate service agreements.

2. Information We Collect

2.1 Account Information (Platform Services)

We collect personal data necessary for providing the Platform Services, including your name, email address, and billing details (including address and payment method).

2.2 Technical Information

We may collect information about your device and browser, such as IP addresses, cookies, and device information, to improve the performance and functionality of our platform.

2.3 Cloud Provider Account Data (Platform Services)

To provide the Platform Services under our Bring Your Own Account (BYOA) model, you grant CloudBooster limited, least-privilege access to your cloud provider account (e.g., AWS, GCP, Azure). Through this access, we collect and store:

  • Resource metadata: Information about cloud resources in your connected accounts, such as resource types, names, configurations, and relationships.
  • Cost data: Cloud spending information used for cost analysis and optimization.
  • ChangeSet records: Details of infrastructure changes proposed, approved, and executed through the platform, including full audit trails.

The ownership of your cloud provider account and all resources within it remains with you at all times. You may revoke CloudBooster's access at any time.

2.4 Data We Do Not Intentionally Access (Platform Services)

CloudBooster does not intentionally access, collect, or store personally identifiable information (PII) of your end users or application data processed by your workloads. While our platform may have technical access to such data through Cloud Provider permissions, our product is not designed to read, process, or store this information, and our employees are instructed not to access it.

2.5 Customer Environments (Professional Services Only)

As part of Professional Services engagements (consulting, migration, troubleshooting, and optimization), we may need to access and manage customer environments, including those not directly managed by CloudBooster.

This access is granted with customer consent and under the terms of the applicable service agreement. We implement strict security measures to ensure that this access is granted securely and under controlled conditions.

2.6 Intellectual Property (Professional Services Only)

During Professional Services engagements, we may have access to customer configurations, source code, and other intellectual property (IP). This information is treated as confidential and is used solely for the purposes of delivering the agreed-upon services.

CloudBooster acknowledges that all IP provided by customers remains the property of the customer. We will not share or use your IP for any purpose other than as part of the services unless authorized by the customer in writing.

2.7 Sensitive Information

As part of managing your cloud resources (whether through Platform Services or Professional Services), we may have technical access to sensitive information stored within your cloud accounts. We treat all such data as confidential and have processes in place to prevent misuse, exposure, or unauthorized access. Our product and employees are not designed or instructed to access this data.

3. Use of Information

We use your data to:

  • Provide and manage the Platform Services and Professional Services
  • Process payments through third-party providers (currently Stripe and AWS Marketplace)
  • Improve the functionality and performance of our platform
  • Communicate with you regarding platform updates, service status, and support
  • Generate aggregated, anonymized insights to improve the Service (no individual customer data is shared)

We will not use your data for any purposes beyond those stated above without your explicit consent.

4. Data Storage and Security

4.1 Data Residency

CloudBooster's platform infrastructure, including all stored customer data (account information, resource metadata, cost data, and ChangeSet records), is hosted within the European Union.

Your workloads and cloud resources remain in whatever region you have configured in your Cloud Provider account. CloudBooster does not move or replicate your workloads.

4.2 Security Measures

Your data is encrypted at rest and in transit. We employ strict access controls, regular security reviews, and appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

5. User Rights and Control

In compliance with GDPR, you have the following rights regarding your personal data:

  • Right to Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You can request corrections to any inaccuracies in your data.
  • Right to Erasure: You can request the deletion of your personal data under certain conditions.
  • Right to Restrict Processing: You may ask us to restrict the processing of your personal data under specific circumstances.
  • Right to Data Portability: You can request a copy of your data in a structured, commonly used format.
  • Right to Object: You can object to the processing of your personal data in certain cases.

To exercise these rights, please contact us at [email protected].

6. Third-Party Data Sharing

We do not sell your personal data to third parties.

We share personal data only with the following categories of third parties, and only as necessary for providing our services:

  • Payment processors: Stripe and AWS Marketplace, for processing subscription payments.
  • Cloud infrastructure providers: For hosting the CloudBooster platform (within the EU).
  • Analytics providers: As described in Section 8, only with your consent.

Any access to customer environments or IP through Professional Services is strictly for the purpose of delivering the agreed-upon services and is governed by the applicable service agreement.

7. Data Retention

We retain your personal data as long as your account remains active on the platform.

Upon account closure or termination of services:

  • Customer data stored on CloudBooster's platform (resource metadata, cost data, ChangeSet records, and audit trails) will be retained for a period of 30 days, during which you may request an export.
  • After 30 days, your data will be permanently deleted unless retention is required by applicable law.
  • You may request earlier deletion of your data at any time by contacting [email protected].

For Professional Services engagements, any data or intellectual property provided by customers will be retained only for as long as necessary to fulfill the purpose of the service, unless otherwise agreed in the service agreement.

8. Cookies and Tracking

We use cookies to improve your experience with the platform, such as remembering your preferences and providing a better user experience. You can manage your cookie preferences through our cookie consent banner or your browser settings.

We use Cookiebot to manage cookie consent and ensure compliance with privacy regulations. Cookiebot helps us provide you with transparent information about the cookies we use and allows you to control which cookies are placed on your device. You can view our complete cookie declaration and manage your preferences at any time through the Cookiebot consent banner. For more information about Cookiebot, visit Cookiebot's Privacy Policy.

We use Google Analytics 4 (GA4) via Google Tag Manager to collect aggregated and anonymized information about how visitors use our website. This includes details such as pages visited, time spent on site, and referring sources, which help us improve our website content and performance. Google Analytics uses cookies and other tracking technologies to provide this data. You can learn more about how Google collects and processes data at Google's Privacy & Terms site.

We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization and fraud/security purposes. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

All analytics and tracking services are only activated after you have given your consent through our cookie consent banner. You can withdraw your consent at any time by clicking on the cookie settings icon in the bottom corner of the page.

9. Compliance with GDPR

CloudBooster s.r.o. is established in the European Union and processes data in accordance with the General Data Protection Regulation (GDPR). This ensures that your personal data is processed lawfully, transparently, and securely.

Where CloudBooster processes personal data on your behalf through the Platform Services, we act as a data processor and you act as the data controller. We will process personal data only in accordance with your instructions, these Terms, and the applicable service agreement.

10. Governing Law and Dispute Resolution

Any issues or disputes related to this Privacy Policy and the processing of your personal data will be governed by the laws of the Czech Republic. By using our platform, you agree that any legal action or proceeding under this Privacy Policy will be subject to the exclusive jurisdiction of the courts of the Czech Republic.

For customers located in the European Union, nothing in this section affects your rights under mandatory consumer protection or data protection laws of your country of residence.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service at least 30 days before the changes take effect. Updates will also be posted on our website. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the modified policy.

12. Contact Us

CloudBooster is the data controller responsible for processing your personal data. If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:

CloudBooster s.r.o. Registration number: 22242686 Oldřichova 187/55 128 00 Praha Registered by Municipal Court in Prague, reference C 412179/MSPH

Email: [email protected] Website: https://cloudbooster.io

← Back to Home