Privacy Notice

GoCloud is operated by kam. kam is the data controller for the personal data described here and decides how and why it is processed. Contact: privacy@gocloudplan.com.

• Account data (name, email, password hash, organisation) — to create and secure your account. Legal basis: performance of our contract with you.
• Billing profile data (billing name, address, tax ID, country) — to issue invoices and meet tax obligations. Legal basis: contract and legal obligation.
• Content you upload (files, documents, project data) — to provide storage, workspace and API features. Legal basis: contract.
• Usage and telemetry (API requests, quota consumption, request logs, feature use) — to meter usage, enforce plan limits, bill overages and improve the product. Legal basis: contract and our legitimate interest in operating and improving the service.
• Device and technical data (IP address, browser and device identifiers, timestamps) — for security, abuse and fraud prevention, and audit logging. Legal basis: legitimate interests and legal obligation.
• Support messages (tickets, attachments, correspondence) — to answer your requests. Legal basis: contract.
• Marketing communications — only where you have opted in. Legal basis: consent, which you can withdraw at any time.

• Service providers / subprocessors — hosting, database, storage, email delivery, analytics and support tooling, acting on our instructions.
• Merchant of Record (Paddle) — for the sale of our products, subscription management, payment processing, tax compliance and invoicing.
• Professional advisers — legal, accounting and audit, where necessary.
• Authorities — where required by law or to protect our legal rights.

We do not sell your personal data.

Our infrastructure and providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

Account, billing and invoice records are kept for as long as your account is active and afterwards for the period required by tax and accounting law. Uploaded content is deleted after account closure, subject to a 30-day export window. Logs and telemetry are kept for a limited operational period and then deleted or anonymised.

Depending on where you live you may have the right to access, correct, delete, restrict or port your data, object to processing, and withdraw consent. You can also complain to your local data protection authority. Email privacy@gocloudplan.com and we will respond within one month.

We apply appropriate technical and organisational measures, including encryption in transit, hashed credentials, private storage buckets, row-level access controls, role-based permissions, IP allowlists and audit logging.

We use essential cookies and local storage for sign-in sessions, security and preferences; these are required for the service to work. Any analytics or marketing cookies are only set with your consent, and you can manage or clear cookies in your browser settings at any time.

See our Terms & Conditions and Refund Policy.