Privacy Policy

Who we are

Cloudstack Solutions operates this website (cloudstacksolutions.io) and the Cloudstack Razor application (razor.cloudstacksolutions.io). This policy covers both. Where a separate agreement governs your organization's use of Razor, that agreement controls if the two differ.

What we collect, and why

• Forms you submit. The contact form collects your name, email, company, and message. The Razor beta request form additionally collects your primary cloud provider and an approximate count of monitored resources. We use this to respond to you and to evaluate beta fit — the purposes you submitted it for.
• Site analytics. We use PostHog to understand how the site is used: pages viewed, referring site, approximate location derived from IP address, device and browser type, and interactions such as clicks and scrolling, including session replay. Replay never records what you type — all input fields are masked, and the beta form is excluded entirely.
• Email engagement. If we email you about the beta, we may see whether the email was delivered, opened, or a link clicked. Every such email includes an unsubscribe link that works.

Data in the Razor application

• Your account. Signing in to Razor uses Clerk, our authentication provider, which processes your name, email address, and sign-in activity on our behalf.
• Your cloud environment. Razor connects to your cloud accounts using credentials your organization grants and scopes. It reads observability and configuration data — alarms, metrics, log excerpts, resource configurations and their relationships — solely to provide the service: correlating incidents, running investigations, and proposing or executing remediations your operators approve. For this data we act on your organization's instructions as a processor; your organization remains the controller of its cloud environment.
• AI processing. Investigations and chat are analyzed by third-party large-language-model providers, routed through Vercel AI Gateway. Your data is not used to train models. Because inference runs with third-party providers, we cannot currently guarantee that content submitted for analysis stays within a particular geographic region.
• Records of actions. Razor keeps a log of recommendations made and actions executed — including who approved them — as an audit record of changes to your environment.
• Usage and billing. We record product usage, such as investigations run and the credits they consume, to operate usage-based billing and show it to your administrators transparently.

Cookies

Analytics runs without cookies until you choose otherwise. If you select Allow cookies in the banner, PostHog stores an identifier so that a return visit can be recognized; if you decline, each session is counted independently and nothing is written to your device by analytics. Two things are stored regardless, because the site cannot function politely without them: your consent choice itself, and your light/dark theme preference. Neither identifies you.

Legal bases

Where GDPR or similar law applies: we process form submissions to take steps you request (responding to you, evaluating beta participation); cookie-based analytics only with your consent; cookieless analytics and beta-related email under our legitimate interest in operating and improving the site and program, which you may object to at any time.

Who processes data on our behalf

We do not sell personal information. It is shared only with the service providers that operate this site, under data processing agreements:

These providers are located in the United States. Where data originates in the EU or UK, transfers rely on the providers' standard contractual clauses and, where certified, the EU–US Data Privacy Framework.

Retention

Form submissions and beta contacts are kept while relevant to the enquiry or the beta program, and deleted on request. Analytics data is retained under PostHog's standard retention and not indefinitely. Data in Razor is kept while your organization participates in the program; when participation or the program ends, beta data may be deleted as described in the Terms of Service. We keep no more than the operation of the site and program requires.

Your rights

You may request access to, correction of, or deletion of your personal information, object to processing based on legitimate interest, and withdraw consent at any time (which does not affect processing that already happened). Use the contact form on this site or reply to any email we have sent you; we act on requests within a reasonable period, and within any period the applicable law sets.

Children

This site is not directed to children and we do not knowingly collect their data.

Changes

We will update this policy when our practices change — including when a processor is added or removed — and revise the date above when we do.