octobercms.cloud

Appearance

Get Started

Other

Privacy Policy ​

October Cloud ("October Cloud," "we," "our," or "us") provides a cloud hosting platform for October CMS applications.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites, create or use an October Cloud account, use our hosting and related services, or otherwise interact with us (collectively, the "Services").

Scope ​

This Privacy Policy applies to personal information that October Cloud collects and processes for its own purposes, including information about our customers, account holders, organization members, website visitors, and people who communicate with us.

October Cloud customers may use the Services to host websites and applications that collect or process personal information about their own users ("Customer Data"). When we process Customer Data on behalf of a customer, the customer determines the purposes and means of that processing and October Cloud acts as a service provider or data processor on the customer's behalf.

Customers are responsible for providing appropriate privacy notices to their users and for ensuring that their use of the Services complies with applicable privacy and data protection laws.

If you have a question or request concerning personal information collected by a website or application hosted on October Cloud, you should generally contact the operator of that website or application directly.

Information We Collect ​

The information we collect depends on how you interact with the Services.

Information You Provide ​

We may collect information you provide directly to us, including:

  • Account information, such as your name, email address, username, and authentication information.
  • Organization information, such as organization names, organization membership, roles, and permissions.
  • Billing information, such as billing addresses, subscription information, transaction history, and payment status. Payment card information may be collected and processed by our payment providers rather than directly by October Cloud.
  • Support and communications, including messages, bug reports, support requests, feedback, and any information or attachments you choose to provide when communicating with us.
  • Application and configuration information, including information you provide when creating, configuring, deploying, or managing applications through the Services.

Information From Third-Party Services ​

When you connect a third-party service to October Cloud, we may receive information necessary to provide that integration.

For example, if you connect a source code hosting provider, we may receive information such as your account identity, repositories you authorize October Cloud to access, repository metadata, branches, commits, and other information necessary to deploy and manage your applications.

We may also receive transaction and payment information from our payment providers, such as payment status, transaction identifiers, billing information, and fraud or risk information.

Information We Collect Automatically ​

When you use the Services, we may automatically collect information such as:

  • Internet Protocol (IP) addresses;
  • browser and device information;
  • dates and times of requests;
  • pages and features accessed;
  • authentication and security events;
  • application and deployment events;
  • system configuration and infrastructure metadata;
  • performance and diagnostic information;
  • resource usage; and
  • logs generated in connection with operating, securing, troubleshooting, and maintaining the Services.

Analytics and Cookies ​

We use cookies and similar technologies to operate the Services, maintain sessions, remember preferences, provide security features, and understand how the Services are used.

We use Google Analytics on our public websites and within authenticated portions of the Services. Google Analytics may collect information about how you interact with the Services, including pages viewed, features used, approximate location, device and browser information, referring pages, and other usage information.

We use this information to understand how people use October Cloud, evaluate and improve the Services, diagnose usability issues, and make product and business decisions. Google may process information collected through Google Analytics in accordance with its own privacy practices.

Customer Applications and Customer Data ​

October Cloud provides infrastructure used by customers to host their own websites and applications. Those applications may process information about their visitors and users.

In providing the Services, October Cloud and its infrastructure providers may process information associated with traffic to customer applications, including IP addresses, HTTP request information, timestamps, diagnostic information, application logs, and other information necessary to route traffic, operate infrastructure, maintain security, diagnose problems, and provide the Services.

Customers control the content and personal information processed by their applications and are responsible for determining what information their applications collect and how that information is used.

October Cloud does not control the privacy practices of applications hosted by its customers.

How We Use Personal Information ​

We may use personal information to:

  • provide, operate, maintain, and improve the Services;
  • create and administer accounts and organizations;
  • provision, deploy, host, and manage customer applications;
  • authenticate users and manage permissions;
  • process subscriptions, payments, and billing;
  • provide customer support;
  • communicate about deployments, billing, security, service changes, and other administrative matters;
  • monitor the reliability, performance, and usage of the Services;
  • detect, investigate, and prevent fraud, abuse, security incidents, and unauthorized activity;
  • troubleshoot and resolve technical problems;
  • enforce our agreements and policies;
  • comply with applicable laws and legal obligations; and
  • protect the rights, property, and safety of October Cloud, our customers, our users, and others.

We may also create aggregated or de-identified information that does not reasonably identify an individual and use that information to analyze and improve the Services.

How We Share Personal Information ​

We may disclose personal information in the following circumstances.

Service Providers ​

We use third-party service providers to operate October Cloud. These providers may process information on our behalf for purposes such as:

  • cloud infrastructure and hosting;
  • databases and data storage;
  • content delivery and networking;
  • source code integrations;
  • payment processing and billing;
  • email delivery;
  • analytics;
  • monitoring, logging, and error reporting;
  • security and fraud prevention; and
  • customer support and business operations.

We provide these service providers with information only as reasonably necessary for them to perform services on our behalf.

Organization Members ​

If you use October Cloud as part of an organization, certain information about your account and activity may be available to the organization's owners, administrators, and other authorized members.

Professional Advisors ​

We may disclose information to professional advisors such as attorneys, accountants, auditors, insurers, and financial institutions when reasonably necessary for the services they provide to us.

We may disclose information when we reasonably believe disclosure is necessary to:

  • comply with applicable law, regulation, legal process, or lawful government request;
  • enforce our agreements or policies;
  • investigate fraud, abuse, or security incidents;
  • protect the security or integrity of the Services; or
  • protect the rights, property, or safety of October Cloud, our customers, our users, or others.

We may disclose information to other parties when you direct us to do so or otherwise provide your consent.

Third-Party Services ​

The Services may integrate with or contain links to services operated by third parties.

Your use of those services is governed by the applicable third party's terms and privacy practices. October Cloud is not responsible for the privacy practices of services that we do not operate or control.

Data Retention ​

We retain personal information for as long as reasonably necessary to provide the Services, maintain legitimate business records, comply with legal obligations, resolve disputes, enforce agreements, and protect the security and integrity of the Services.

Retention periods may vary depending on the type of information and why we process it.

When information is no longer reasonably necessary, we may delete or anonymize it. Information may remain in backups for a limited period after deletion from active systems.

Data Security ​

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.

No system for transmitting or storing information can be guaranteed to be completely secure, and we cannot guarantee the absolute security of information processed through the Services.

Customers are also responsible for appropriately configuring and securing their accounts, credentials, applications, and application data.

International Data Processing ​

October Cloud is based in the United States.

We and our service providers may process and store information in the United States and other countries where we or our service providers operate. These countries may have privacy and data protection laws that differ from those in your country of residence.

Where required by applicable law, we will use appropriate safeguards for international transfers of personal information.

Your Privacy Rights ​

Depending on where you live, applicable law may provide you with rights regarding your personal information, which may include the right to:

  • access personal information we hold about you;
  • correct inaccurate personal information;
  • request deletion of personal information;
  • obtain a portable copy of certain personal information;
  • object to or restrict certain processing; and
  • withdraw consent where processing is based on your consent.

These rights may be subject to limitations and exceptions under applicable law.

We may need to verify your identity before fulfilling a request.

If your request concerns personal information processed by an application hosted by an October Cloud customer, you should contact that customer directly. Where appropriate, we will assist our customers in responding to requests concerning Customer Data.

Children ​

The Services are not directed to children, and October Cloud does not knowingly collect personal information directly from children in connection with the creation or administration of October Cloud accounts.

Customers are responsible for ensuring that applications they operate using the Services comply with applicable laws concerning the collection and processing of children's personal information.

Changes to This Privacy Policy ​

This Privacy Policy is subject to change. We may update it from time to time to reflect changes to our Services, practices, or legal obligations.

When we make changes, we will update the "Last updated" date at the bottom of this policy. If changes are material, we may provide additional notice where appropriate or required by law.

Contact Us ​

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise a privacy right, contact us at privacy@octobercms.cloud.