∞
CloudLink Legal & Trust
Data Protection & Governance

Privacy Policy (GDPR / CCPA)

Last Updated: September 27, 2026 • Globally Applicable

1. Commitment to Data Protection

CloudLink Systems ("we", "us", or "our") respects the privacy rights of our registered customers and incoming web visitors. This Privacy Policy outlines how telemetry, personal information, and network traffic data are collected, processed, and safeguarded in strict compliance with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

2. Categories of Information Collected

A. Customer Account Data

When creating an account, we collect your name, email address, salted bcrypt password hash, and optional referral identification.

B. Link Routing & Edge Telemetry Data

When end-users click a CloudLink URL, our edge infrastructure processes technical network headers: incoming IP address, ISO country code via GeoIP lookup, User-Agent string (browser and operating system family), referring URL, and click timestamp.

3. Legal Basis for Processing (GDPR Article 6)

We process information exclusively under the following lawful bases:

  • Contractual Performance: Delivering sub-millisecond URL forwarding, QR code downloads, and pre-lander rendering requested by the account holder.
  • Legitimate Interest & Network Defense: Identifying and isolating malicious scrapers, automated click-fraud farms, DDoS vectors, and zero-day phishing attacks.
  • Legal Compliance: Responding to lawful abuse notices and cooperating with international safe browsing clearinghouses.

4. We Do Not Sell or Monetize Personal Data

CloudLink never sells, leases, or trades user or visitor personal information to third-party data brokers or behavioral advertising networks. Telemetry logs exist solely for customer analytics dashboards and threat mitigation.

5. Your GDPR & CCPA Privacy Rights

Regardless of your geographic location, you retain full rights regarding your data:

  • Right to Know / Access: Request a complete export of all data stored against your account.
  • Right to Erasure ("Right to be Forgotten"): Request immediate permanent deletion of your account and historical click logs.
  • Right to Non-Discrimination: Equal service access regardless of privacy rights exercised.

To exercise any of these rights, contact our Data Protection Officer at: [email protected].