Privacy Policy

The short version: your cloud data never leaves your environment, we collect only what it takes to run your subscription, and this site's analytics are cookieless and anonymous.

Effective date: September 6, 2026

This policy explains what Cloud-Vex LLC, an Ohio limited liability company (“Cloud-Vex”, “we”, “us”), collects when you visit cloud-vex.com or use the Cloud-Vex service, and what we do with it.

Your cloud data stays in your cloud

Cloud-Vex is deployed inside your cloud account. Scans run there, results are stored there, and the collectors are read-only. The contents of your cloud environment — resources, configurations, costs, scan findings — are never transmitted to us. We could not show you your scan results if we wanted to; they exist only in your environment.

What we do collect

When you subscribe. Your organisation name, contact name, and email address (from the signup form), plus the subscription identifiers your cloud marketplace gives us to verify the purchase — for AWS, that is a customer identifier and your AWS account number. We use these to issue your licence, deliver your key, and manage your subscription. Payment runs entirely through the marketplace: we never see your card, bank, or billing details.

When your deployment checks its licence. Your Cloud-Vex deployment periodically confirms its licence key with us. We record that the check happened and when. In our logs the key appears only as a one-way hash, never in full.

When you join the waitlist. Your email address, optionally your organisation name, and which page you came from. We use it for one purpose only: to tell you once, when Cloud-Vex is available to buy. No newsletter, no other mail, and it is never passed to anyone else. Every message carries a link that deletes your address from the list immediately — no reply needed and no record kept. You can also write to support@cloud-vex.com and we will remove it by hand. If the product does not ship, we delete the list.

When you subscribe to news. Your email address and the page you subscribed from. We use it for one purpose: to send you an email when a new post is published on our Latest News page — product updates and announcements, nothing else. It is a separate list from the waitlist, it is never passed to anyone else, and every message carries a link that deletes your address immediately. You can also write to support@cloud-vex.com and we will remove it by hand.

When you email support. Your message and address, used to answer you.

When you browse this site. Ordinary server logs, plus anonymous, cookieless visit statistics from Plausible Analytics, described in the next section. The public site sets no cookies and runs no advertising trackers.

Analytics

We use Plausible Analytics to learn which pages get read, where visitors arrive from, and which buttons get pressed — joining the waitlist or subscribing to news, opening a video, picking a marketplace. That is what tells us which parts of this site are earning their place. Plausible is built for exactly this kind of restraint: it uses no cookies, stores nothing in your browser, and builds no profile of you. It records the page viewed, the site that referred you, your browser and device type, and an approximate location (country, region and city) worked out from your IP address.

Nothing it keeps can identify you. Your IP address and browser signature are used only to tell one visit from another within a single day, as a salted one-way hash whose salt is thrown away every 24 hours, and they are never stored. What it collects is never joined to your name, your email address, or anything you type into a form. Because no cookie is set and no personal data is retained, there is no consent banner to click through — the site simply works.

Plausible Analytics is run by Plausible Insights OÜ in the European Union, and its data is stored there, under its own data policy. We do not use it for advertising, and we do not share its data with anyone.

What we use it for

Provisioning and operating your subscription, sending transactional email about it (your licence key, purchase confirmations, renewal and expiry notices), answering support requests, and meeting our tax and accounting obligations. We do not sell or rent personal information, and we do not send marketing email without your consent.

Who touches it on our behalf

Amazon Web Services hosts our infrastructure. Microsoft 365 hosts our mailboxes and sends all of our email — licence keys, subscription notices, waitlist confirmations and news posts alike — so any address we write to passes through it. Plausible Insights OÜ hosts our site analytics in the European Union and receives only the anonymous statistics described above. The cloud marketplace you purchased through processes billing under its own privacy terms. These providers process data only to provide those services to us.

How long we keep it

Subscription and licence records are kept for the life of your subscription and afterwards as required for tax, accounting, and audit purposes. Support correspondence is kept as long as it is useful for helping you.

Your choices

Email support@cloud-vex.com to ask what we hold about you, correct it, or have it deleted where the law and our record-keeping obligations allow. We answer within one business day.

Children

Cloud-Vex is a business tool and is not directed at anyone under 16. We do not knowingly collect information from children.

Changes

If this policy changes, the new version appears here with a new effective date. Material changes that affect active subscribers are announced by email.

Questions about this policy: support@cloud-vex.com