Legal
Privacy Policy
This Privacy Policy describes how Cirrus Technologies, LLC (“Cirrus,” “we,” “our,” or “us”) collects, uses, shares, and protects information when you visit our websites, use our client portal, or engage our cloud infrastructure and software development services (together, the “Service”). By using the Service you agree to the practices described here and to our Terms & Conditions.
1.Information We Collect
Information you provide
- Account and registration information: your name, business name, email address, phone number, mailing address, job title, and login credentials when you register for the client portal.
- Identity verification: where required by our Terms, copies of government-issued identification for you and, if applicable, your Guardian. These are stored securely and used only for compliance and audit purposes.
- Billing information: billing contact details and payment method information. Complete payment card details are collected and stored by our payment processor, Stripe, and never reach our servers.
- Client Data: data, files, code, configurations, and other content you upload to or create within the Service. You retain ownership of Client Data.
- Communications: messages, support tickets, feedback, and other correspondence you send to us.
- Mobile information: if you enroll in SMS notifications, the mobile phone number you provide, your opt-in status, the date and time of your consent, and the notification categories you select. See Section 3.
Information collected automatically
- Usage and device data: IP address, browser type, operating system, referring pages, pages viewed, actions taken within the portal, and timestamps.
- Log and security data: authentication events, API requests, and error reports used to operate, secure, and troubleshoot the Service.
- Cloud resource telemetry: utilization and billing metrics for infrastructure we provision and manage on your behalf.
2.How We Use Information
We use the information we collect to:
- Provide, operate, maintain, and improve the Service and the projects we deliver for you.
- Create and manage your account and verify your identity.
- Generate invoices, process payments, issue receipts, and respond to payment disputes.
- Send transactional communications such as invoices, receipts, support responses, service status updates, security alerts, and, if you opt in, SMS notifications.
- Provide customer support and respond to your requests.
- Monitor for, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms.
- Comply with legal, accounting, tax, and regulatory obligations.
- Analyze usage in aggregate to understand how the Service is used and to improve it.
We do not sell your personal information, and we do not use Client Data to train machine-learning models or for advertising.
3.SMS and Mobile Information
SMS notifications are an optional, opt-in feature described in Section 18 of our Terms & Conditions. Consent to receive SMS is not a condition of purchase, and you can use every feature of the Service without providing a mobile number.
What we collect. If you enroll, we store the mobile phone number you provide, your opt-in status, the date and time you consented, the version of our policies in force at the time, and the categories of messages you selected.
How we use it. Mobile information is used solely to operate the Cirrus Technologies SMS notification program: delivering the account and service notifications you opted into, honoring STOP and HELP requests, and demonstrating valid consent to carriers or regulators if required.
No sharing for marketing. We will not share or sell your mobile phone number, SMS opt-in status, or other mobile information with third parties or affiliates for marketing or promotional purposes. Mobile information is shared only with the SMS gateway provider required to deliver the messages you have opted into, and that provider is contractually restricted to using it for that purpose.
Opting out. Reply STOP to any message, update your notification settings in the client portal, or email support@cirrus-tech.com. Once you unsubscribe, your phone number is removed from our notification system. We retain a record of the consent and opt-out timestamps for compliance with messaging regulations.
6.Data Retention
- Account information is retained for as long as your account is active and for a reasonable period afterward to resolve disputes and meet legal obligations.
- Client Data is retained while your account is active. Following termination you may request an export within 30 days, and after 60 days we may permanently delete all Client Data, as described in our Terms.
- Invoice and transaction records are retained for at least 7 years to comply with accounting and tax requirements.
- Identity verification documents are retained only as long as needed for compliance and audit purposes.
- Mobile information is deleted from our notification system when you unsubscribe; consent and opt-out timestamps are retained for compliance.
- Logs and security data are retained for a limited period consistent with our security and operational needs.
7.Security
We implement appropriate technical and organizational measures to protect your information, including encryption in transit, encryption at rest for sensitive data such as mobile numbers and identity documents, access controls limited to authorized personnel, multi-factor authentication, and monitoring for unauthorized access. Payment processing follows PCI-DSS requirements through Stripe.
No method of transmission or storage is completely secure. If we become aware of a security incident affecting your information, we will notify you as required by applicable law.
8.Your Choices and Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and receive a copy in a portable format.
- Correct inaccurate or incomplete information.
- Request deletion of your personal information, subject to our legal and contractual retention obligations.
- Object to or restrict certain processing.
- Opt out of SMS notifications at any time by replying STOP or updating your portal settings.
- Opt out of non-essential email communications using the unsubscribe link in those emails. Transactional emails such as invoices and security alerts cannot be opted out of while your account is active.
To exercise any of these rights, contact us at legal@cirrus-tech.com. We may need to verify your identity before responding. We will not discriminate against you for exercising your rights.
9.Children and Legal Capacity
The Service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Users who cannot enter a binding agreement without parental or guardian consent under the laws of their jurisdiction must satisfy the Guardian requirements in Section 1 of our Terms & Conditions. If you believe a child has provided us with personal information, contact us and we will delete it.
10.International Users
Cirrus Technologies, LLC is based in the United States and processes information in the United States and in the regions where our infrastructure providers operate. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction.
11.Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to the primary account administrator at least 14 days before taking effect, and the “Last Updated” date above will be revised. Continued use of the Service after changes take effect indicates acceptance of the updated Policy.
12.Contact Us
For questions about this Privacy Policy or our data practices, contact our support team at support.cirrus-tech.com or email legal@cirrus-tech.com.