Privacy Policy
Last updated: 9 January 2026
Cloud Commute ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you access or use our website www.cloudcommute.io, the Cloud Commute web application, and any related services (collectively, the "Services").
This Privacy Policy is intended to comply with the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and other applicable data protection laws.
1. Controller Information
Data Controller: Cloud Commute
Registered in: United Kingdom
Registered address:
167-169 Great Portland Street,
5th Floor, London,
W1W 5PF,
United Kingdom
Email: privacy@cloudcommute.io
If you have questions about this Privacy Policy or our data practices, you may contact us using the details above.
2. Scope of This Policy
This Privacy Policy applies to:
- Visitors to our website
- Registered users and account holders
- Job seekers and employers using our platform
- Newsletter subscribers
- Any individual whose personal data we process in connection with our Services
3. Personal Data We Collect
3.1 Information You Provide Directly
- Full name
- Email address
- Phone number
- Account login credentials
- Billing and payment information (processed via third-party payment processors)
- User-generated content (e.g. job listings, profiles, messages, submissions)
- Communications sent via contact forms or email
3.2 Information Collected Automatically
- IP address
- Device identifiers
- Browser type and version
- Operating system
- Referring URLs
- Pages viewed and interactions
- Cookies and similar tracking technologies
3.3 Location Data
- Approximate geographic location derived from IP address
4. How We Collect Personal Data
- Account registration and user profiles
- Job postings and applications
- Contact and support forms
- Newsletter subscriptions
- Payment transactions
- Cookies, pixels, and analytics tools
- Third-party integrations
5. Legal Bases for Processing (UK/EU GDPR)
We process personal data only where we have a lawful basis, including:
- Contractual necessity – to provide and operate the Services
- Consent – for marketing communications and certain cookies
- Legitimate interests – to improve our Services, ensure security, and prevent fraud
- Legal obligation – to comply with applicable laws and regulations
6. How We Use Personal Data
- Provide, operate, and maintain the Services
- Create and manage user accounts
- Process payments and subscriptions
- Facilitate job postings and applications
- Communicate with users
- Send newsletters and marketing communications (where permitted)
- Analyse usage and improve platform performance
- Ensure platform security and prevent abuse
- Comply with legal obligations
7. Cookies and Tracking Technologies
We use cookies and similar technologies to enable essential site functionality, analyse traffic and usage patterns, and deliver targeted advertising.
You can manage or disable cookies through your browser settings. Where required by law, we obtain your consent before placing non-essential cookies.
8. Third-Party Service Providers
We may share personal data with trusted third parties that provide services on our behalf, including:
- Stripe – payment processing
- Google Analytics – analytics and performance monitoring
- Mailchimp – email communications
- Meta Ads – advertising and remarketing
- Heroku – application hosting
- Cloudflare – security and content delivery
- MaxMind – fraud prevention and IP geolocation
- OpenAI – AI-powered CV parsing and data extraction
These providers process data only in accordance with our instructions and applicable data protection laws.
8.1 Artificial Intelligence and Automated Processing
We use AI technology to help parse and extract structured information from CVs and resumes you upload. Before any data is sent to our AI provider:
- Personal identifiers (such as phone numbers, email addresses, and national ID numbers) are automatically redacted
- Only the information necessary for job matching is processed
- We have a Data Processing Agreement in place with our AI provider ensuring GDPR-compliant handling of your data
This automated processing helps us provide faster and more accurate job matching services. You have the right to request human review of any automated decisions that significantly affect you.
9. International Data Transfers
Because our users are global, personal data may be transferred outside the UK or European Economic Area. This includes transfers to the United States for AI-powered CV processing. Where this occurs, we ensure appropriate safeguards are in place, including:
- UK International Data Transfer Agreements
- EU Standard Contractual Clauses
- Transfers to countries deemed adequate by UK or EU authorities
- Data Processing Agreements with all third-party processors
10. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, comply with legal requirements, resolve disputes, and enforce agreements. When data is no longer required, it is securely deleted or anonymised.
Specific retention periods include:
- User account data – retained while your account is active, and for up to 3 years after account deletion for legal and audit purposes
- CV and application data – retained while your account is active; you may delete this data at any time through your account settings
- Compliance and audit logs – retained for up to 3 years to meet regulatory requirements (these logs do not contain your personal data, only anonymised records of data processing activities)
- Payment records – retained for 7 years as required by financial regulations
11. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
12. Your Data Protection Rights
Depending on your location, you may have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
UK users may contact the Information Commissioner's Office (ICO).
13. Marketing Communications
You may opt out of marketing communications at any time by clicking the "unsubscribe" link in emails or contacting us directly. Transactional or service-related communications may still be sent.
14. Children's Privacy
Our Services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of the Services constitutes acceptance of the revised Policy.
16. Contact Us
Cloud Commute
Email: privacy@cloudcommute.io
Address:
167-169 Great Portland Street,
5th Floor, London,
W1W 5PF,
United Kingdom
California Privacy Notice (CCPA / CPRA)
This California Privacy Notice supplements the Privacy Policy of Cloud Commute and applies solely to individuals who reside in the State of California ("Consumers", "you"). It is provided to comply with the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act ("CPRA").
Any terms defined in the CCPA/CPRA have the same meaning when used in this Notice.
1. Categories of Personal Information Collected
Within the past twelve (12) months, Cloud Commute has collected the following categories of personal information:
- Identifiers – name, email address, phone number, IP address, account identifiers
- Personal information categories listed in Cal. Civ. Code §1798.80(e) – billing and payment information
- Internet or electronic network activity – browsing history, interactions with our website and app
- Geolocation data – approximate location derived from IP address
- Professional or employment-related information – job-related information provided by users
- User-generated content – job listings, profiles, messages, and submissions
We do not knowingly collect sensitive personal information for the purpose of inferring characteristics as defined under CPRA.
2. Sources of Personal Information
We collect personal information directly from you, automatically through your use of the Services, and from third-party service providers and integrations.
3. Purposes for Collecting and Using Personal Information
We collect and use personal information for the following business and commercial purposes:
- Providing and operating the Cloud Commute platform
- Creating and managing user accounts
- Processing payments and subscriptions
- Facilitating job postings and applications
- Communicating with users
- Marketing and advertising (subject to your rights)
- Analytics, security, and fraud prevention
- Legal compliance and enforcement
4. Disclosure of Personal Information
We may disclose personal information to service providers and contractors for business purposes, including:
- Payment processors (e.g., Stripe)
- Analytics providers (e.g., Google Analytics)
- Email and marketing platforms (e.g., Mailchimp)
- Advertising partners (e.g., Meta Ads)
- Hosting, security, and infrastructure providers (e.g., Heroku, Cloudflare)
All such disclosures are governed by written agreements restricting the use of personal information to specified business purposes.
5. Sale or Sharing of Personal Information
Cloud Commute does not sell personal information in exchange for monetary consideration.
However, certain advertising and analytics activities may constitute "sharing" of personal information under CPRA for purposes of cross-context behavioral advertising.
You have the right to opt out of the sale or sharing of personal information as described below.
6. Your California Privacy Rights
California residents have the following rights, subject to verification:
- Right to Know – request disclosure of collected, used, shared, or disclosed personal information
- Right to Delete – request deletion of personal information
- Right to Correct – request correction of inaccurate personal information
- Right to Opt-Out – opt out of the sale or sharing of personal information
- Right to Limit – limit the use of sensitive personal information (if applicable)
- Right to Non-Discrimination – not be discriminated against for exercising your rights
7. How to Exercise Your Rights
To exercise your California privacy rights, you may submit a request by:
- Emailing us at: privacy@cloudcommute.io
We may need to verify your identity before processing your request. Authorized agents may submit requests on your behalf with appropriate documentation.
8. Retention of Personal Information
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including legal, accounting, and security purposes.
9. Minors Under 16
Cloud Commute does not knowingly sell or share the personal information of consumers under the age of 16.
10. Changes to This California Privacy Notice
We reserve the right to amend this Notice at our discretion. Updates will be posted with a revised "Last updated" date.
11. Contact Information
If you have questions regarding this California Privacy Notice, please contact:
Cloud Commute
Email: privacy@cloudcommute.io
Address:
167-169 Great Portland Street,
5th Floor, London,
W1W 5PF,
United Kingdom