Privacy Policy

Last Updated: August 26, 2026

This Privacy Policy explains how CloudyBot AI (“CloudyBot”, “Service”), operated by CloudAxis Labs LLC (“Company”, “we”, “us”, “our”), collects, uses, and protects personal information.

By using https://cloudybot.ai or any related websites, applications, or services, you agree to this Privacy Policy. Our Terms of Service also apply.

1. Company Information

CloudyBot AI is operated by:

CloudAxis Labs LLC
30 N Gould St STE R, Sheridan, WY 82801, USA

Contact: privacy@cloudaxis.ai (include “Privacy” or “Data request” in the subject line for privacy-related mail).

2. Information We Collect

2.1 Information You Provide

When you create an account, subscribe to a plan, contact support, use AI features, or connect third-party services, we may collect:

2.2 Automatically Collected Information

When you use the Service, we may collect IP address, device and browser type, usage logs, timestamps, and feature interaction data. This helps us maintain security, operate the Service, and improve functionality.

On our public website we use Plausible Analytics for aggregate traffic statistics without the same kind of persistent third-party analytics cookies. If you opt in to non-essential cookies via our cookie banner, we may also use Google Analytics 4 (Google LLC) and the Meta Pixel (Meta Platforms) to measure site usage, conversion funnels, and the performance of our own advertising; that processing is subject to each provider’s privacy policy and may involve cookies stored on your device. You can withdraw consent by clearing site data for cloudybot.ai or using the cookie preference controls described in our Cookie Policy.

2.3 AI Inputs and Outputs

We process prompts you submit, content generated by AI, and workflow/conversation data related to your use. CloudyBot chat uses OpenAI GPT-5.6 Luna only (including Gmail, Calendar, and Search Console when you connect them). There is no user-facing model picker. DeepSeek is not used for CloudyBot chat or Google Workspace data. DeepSeek is used only by Glimeo, a separate demo-video product that takes a user-provided website URL and does not access Gmail, Google Calendar, or Search Console APIs. Those providers process data under their own terms and privacy policies. We do not use your content to train third-party foundation models. You are responsible for ensuring that content you submit complies with laws and third-party rights. See our Subprocessors page for a current list.

2.4 Cloud Browser Features (If Enabled)

If you use optional cloud-based browser workspace features: session identifiers and context IDs may be stored; authentication tokens may be processed through secure third-party infrastructure providers. We do not intentionally store raw login credentials for third-party platforms. Browser session data may be processed by third-party infrastructure providers in accordance with their policies.

2.5 Payment Information

Payments are processed by third-party payment providers (e.g. Stripe). We do not store full credit card details. Payment providers process billing information according to their own privacy policies.

2.6 Google Workspace user data (Gmail and Calendar)

If you choose to connect Gmail or Google Calendar, open Launchpad (app drawer) → Email or Calendar → Connect. We access those Google accounts only as authorized through Google’s OAuth consent screen and the scopes you approve. The same integrations are available on CloudAxis (operated by the same company, shared backend).

Gmail (gmail.modify): depending on features you use, we may access message metadata (sender, subject, date), message bodies, attachments you ask us to save, and the ability to compose, send, mark as read, or move messages to trash when you direct the assistant in chat.

Google Calendar (calendar): we may access event metadata (title, time, location, attendees) and create, update, or delete events when you direct the assistant in chat.

We use Google Workspace data solely to provide mailbox and calendar features you request. We do not use it for advertising, sell it, or transfer it to data brokers. Human access is limited to security, abuse prevention, legal compliance, or support when you ask us to help with your account.

You can disconnect Gmail or Google Calendar at any time in Launchpad → Email or Calendar. When you disconnect, we delete stored OAuth tokens for that connection and stop accessing that account, except where limited records must be retained for security, legal compliance, or backup cycles as described in this policy.

2.7 Google Workspace data and third-party AI services

CloudyBot is an AI assistant. When you connect Gmail or Google Calendar and ask a question in chat, our servers may fetch relevant message or event content from Google’s APIs and include the minimum content needed for that request in a prompt to a third-party large language model (LLM) API provider only to generate your response for that request.

We use commercial API inference only (not self-hosted or offline models for Google Workspace data). Google Workspace user data is sent only to OpenAI (GPT-5.6 Luna / ChatGPT). CloudyBot chat does not use DeepSeek. DeepSeek is used only by Glimeo, a separate demo-video product that takes a user-provided website URL and does not access Gmail, Google Calendar, or Search Console APIs. See our Subprocessors page.

We do not use raw, aggregated, anonymized, or derived Google Workspace API user data to create, train, or improve foundational or generalized AI/ML models. We do not transfer Google Workspace data to third-party AI services for training purposes. Transfers to LLM API providers occur only as necessary to fulfill an individual user’s chat request after that user has connected the integration and initiated the action.

The use of raw or derived user data received from Google APIs (including Gmail and Google Calendar) will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Information

We use collected information to: provide and maintain the Service; authenticate users and manage accounts; process payments and enforce plan limits; improve features and user experience; provide customer support; enforce our Terms of Service; prevent fraud and abuse; and comply with legal obligations. We do not sell personal data.

Where privacy laws require a legal basis, we process personal information based on performance of our contract with you (providing the Service), our legitimate interests (security, abuse prevention, service reliability and improvement), compliance with legal obligations, and your consent where required (for example non-essential analytics cookies, connected third-party channels, or proactive messaging).

4. U.S. State Privacy Rights

CloudAxis Labs LLC is a U.S. company. Depending on where you live, state laws (including California’s CCPA/CPRA) may give you rights to know what personal information we collect, to request deletion, and to opt out of certain types of sharing. We do not sell personal information for money as that term is commonly understood. To exercise rights, contact privacy@cloudaxis.ai (use a clear subject line, e.g. “Privacy request” or “California privacy rights”). We may verify your request before responding.

4.1 California residents (CCPA/CPRA)

If you are a California resident, you may have the right to request access to categories and specific pieces of personal information we have collected about you, to request deletion of personal information subject to exceptions, and to opt out of “sale” or certain “sharing” of personal information. We do not sell personal information as defined under the CCPA. You may designate an authorized agent to make a request on your behalf where permitted by law. We will not discriminate against you for exercising these rights. To submit a request, contact privacy@cloudaxis.ai with “CCPA request” in the subject line.

5. Data Sharing

We may share data with: cloud hosting providers; AI and model infrastructure providers; browser infrastructure providers; payment processors; email delivery providers; messaging platform providers when you connect them; and legal or regulatory authorities when required by law. We do not sell personal information to third parties. A list of key subprocessors is on our Subprocessors page.

6. Third-Party Services

CloudyBot may integrate with or link to third-party services. Your use of those services is subject to their own privacy policies. We are not responsible for the privacy practices of third-party platforms.

7. Data Retention

We retain personal data only as long as necessary to provide the Service, comply with legal obligations, and resolve disputes or enforce agreements. Conversation history may be retained according to your plan (for example from 7 days to unlimited as described at signup). Account profile and workspace files remain until you delete them or delete your account. Automation consent records are retained while your account exists so we can prove the configuration and consent for scheduled workflows; they are deleted with your account unless we are legally required to preserve related records. You may request account and data deletion from dashboard settings or by contacting us. Operational logs may be retained for security and abuse prevention (typically up to one year unless a longer period is required by law). Certain billing-related, legal, security, abuse-prevention, or safety records may be retained longer where required or permitted by law.

8. Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect personal data. No system is completely secure, and we cannot guarantee absolute security.

9. Your Rights

You may request access, correction, or deletion of your personal information, and export your data from the dashboard where available. Depending on your location, you may also have rights to object to or restrict certain processing, withdraw consent where consent is the basis for processing, and lodge a complaint with your local data protection authority. To exercise rights, contact privacy@cloudaxis.ai. We may verify your identity before fulfilling requests.

10. International Processing

We are based in the United States. Our service providers may process data in the United States or other countries where they operate. By using the Service, you understand that your information may be processed outside your home state or country. See our Subprocessors page for a current list.

11. Children’s Privacy

CloudyBot is not intended for individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us and we will take steps to remove it.

12. Cookies and Similar Technologies

We use cookies and similar technologies (including localStorage) to maintain sessions, remember your preferences, improve functionality and security, and analyze usage in aggregate. Before setting non-essential cookies, we ask for your consent via a cookie banner. You can accept or reject non-essential cookies; essential cookies (e.g. for authentication) are required for the Service to function. You can change your choice at any time by clearing site data or visiting our Cookie Policy page. You can also control cookies through your browser settings. Disabling certain cookies may affect how the Service works.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted with a revised “Last Updated” date. Where appropriate, we will notify you by email or in-app notice. Continued use of the Service after the effective date indicates acceptance of the revised policy.

14. Contact

For privacy inquiries or to exercise your rights, contact privacy@cloudaxis.ai with a descriptive subject line.

← Back to CloudyBot · Terms of Service · Pricing