Privacy Policy

1. Introduction

Welcome to CloudRova, an AI-powered cloud infrastructure intelligence platform owned and operated by Dudhal Labs Pvt. Ltd. ("we," "our," or "us"). We are committed to upholding the highest standards of data security, transparency, and user privacy in accordance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Information We Collect

Account & Organization Information: Name, work email address, company or organization name, and billing details for platform access.
Cloud Connection Metadata: AWS IAM Role ARNs, AWS Account IDs, and cryptographic External IDs used exclusively to authenticate read-only scanning sessions.
Infrastructure Configuration Telemetry: Non-sensitive cloud resource metadata (e.g., EC2 instance types, EBS volume IDs, attachment states, NAT gateway metrics, and Cost Explorer summaries).
Application Usage Logs: Secured session logs, API request timestamps, and device diagnostics used strictly to maintain reliability and prevent malicious activities.

3. Strict Zero Customer Data Access Policy

CloudRova operates strictly as an infrastructure metadata intelligence engine. We do not, and will never:

Access, read, intercept, or store the contents of your databases, application payloads, or customer records.
Read or inspect files stored in your Amazon S3 buckets or storage volumes.
Request or store root cloud credentials, IAM secret access keys, or administrative write privileges.
Install invasive background agents or software packages inside your virtual server operating systems.

4. Data Governance & Encryption

All communications between your browser, our backend, and cloud provider APIs are protected using TLS 1.3 encryption. Metadata stored in our PostgreSQL databases is protected with AES-256 encryption at rest. We implement multi-tenant isolation, automated JWT token rotation, and strict role-based access controls to safeguard all platform records.

5. Purpose of Processing

The information we collect is processed strictly to:

Scan cloud environments to identify financial waste, idle resources, and right-sizing opportunities.
Audit security configurations against industry-recognized benchmarks (e.g., AWS Well-Architected Framework).
Generate remediation scripts (AWS CLI, Terraform) customized to your resource IDs.
Provide concierge enterprise customer support and service reliability updates.

6. Your Rights & Data Retention

Under the DPDP Act and international privacy frameworks, you retain full ownership of your data. You may disconnect connected cloud accounts at any moment, which immediately invalidates all scanning tokens. You also have the right to request comprehensive deletion of your organization records and associated scan history by contacting our support team.

7. Grievance Redressal & Inquiries

For any privacy concerns, data governance inquiries, or grievance redressal, please contact our dedicated desk:

Email: privacy@cloudrova.com • support@cloudrova.com
Company: Dudhal Labs Pvt. Ltd.
Timeline: Acknowledgment within 24 hours, resolution within 15 days.