Privacy

Privacy Notice

What we collect, how we use it, and how you can manage your information.

01

Scope and controller

This notice covers personal-information processing when you visit CLOUBAY, browse cases and industry demos, submit project enquiries, or when authorised staff use the content admin. The site operator and data controller is 深圳市云湾出海科技有限责任公司。

Once a client project formally begins, the contract, project plan or a separate data-processing agreement may contain more specific rules; client business data outside this site's features is governed by those documents.

Our principlesCollect only what communication and security require, use it for stated purposes, and let you request access, correction or deletion.
02

What we collect

We mainly collect the following when you actively submit information or use protected features:

Project enquiry detailsName, email, optional company/brand, phone or WeChat, services needed, budget, timeline and project description.
Submission & source recordsSubmission time, source page, consent timestamp and a random dedupe ID; demo-originated enquiries also record the demo and version.
Essential security dataTo limit abuse, the server irreversibly hashes network addresses and briefly counts requests; production may also keep necessary error and access logs.
Staff admin dataAdmin accounts, names, roles, sign-in sessions, and operation logs for content editing, publishing and enquiry handling.

We never ask for IDs, bank accounts, health data or other sensitive personal information in the public form. Please don't include unrelated sensitive content in the project description.

03

Why we use this information

Collected information serves the needs you raise and the work required to run the site:

  • Confirming your identity and contact details to reply to enquiries;
  • Understanding business goals to judge fit and prepare advice;
  • Managing enquiry status, internal follow-ups and cooperation records;
  • Securing the form, admin and demo services; troubleshooting and preventing abuse;
  • Meeting legal obligations and establishing, exercising or defending legal rights.

Processing relies mainly on your explicit consent when submitting the form, processing necessary to respond, and our legal obligations. If purposes change materially, we'll update this notice and re-obtain consent where required.

04

Marketing, profiling & automated decisions

Enquiries are never auto-added to marketing emails, contact details are never sold, and no personal information is used for ad targeting, profiling or automated decisions with significant effects on you.

Case filters, carousels and demo categories respond only to page content or your own choices — never to identity, spending power or behavioural traits when pricing or offering services.

05

Processors, sharing & cross-border

Only authorised staff handling business communication, maintenance or compliance can view relevant information within their duties. To run the site we may use hosting, database, object-storage, security or email providers — receiving only what their service requires.

  • We never sell personal information to any third party;
  • Providers must follow agreed confidentiality and security measures and may not repurpose the data;
  • We don't disclose without basis, except to comply with regulators or courts, or to protect personal and major property safety;
  • The international website stores project enquiries on its server in Germany (HostBrr). Authorised CLOUBAY staff may access them from their operating locations to respond to your request. Hosting, security and communication providers may process data in their service regions.
06

How long we keep information

We keep information for the shortest period needed for its purpose. Enquiries that don't lead to cooperation and no longer need follow-up are kept at most 180 days from submission; maintenance routines regularly review and purge eligible records.

Cooperation establishedRetained per contract, tax, dispute and applicable-law requirements, then deleted or anonymised.
Rate-limit digestsOnly for short-term abuse prevention; records older than 2 days are cleaned up.
Admin & audit logsKept as needed for account security, permission management and operation traceability; reviewed periodically by admins.
07

Managing your information

Within applicable law, you may request to know how your data is processed, access or copy it, correct inaccuracies, delete what's no longer needed, withdraw consent, restrict or refuse specific processing, and ask us to explain the rules.

Submit requests via the contact option at the bottom of this page — include your name, the email used, request type and relevant timeframe. We may verify identity first. Withdrawal doesn't affect lawful processing already completed.

When deletion can't be immediateIf information is still needed for contracts, legal duties, disputes or security, we stop unnecessary use and process it once the retention grounds lapse.
08

Minors

This site targets businesses and adults with project needs; minors aren't a primary audience and we don't knowingly collect data from children under fourteen. If a guardian finds a minor submitted information without consent, contact us and we'll delete it or otherwise handle it promptly after verification.

09

How we protect information

Production transmits data over HTTPS and uses role-based permissions, login-failure lockouts, origin checks, form length limits, database access control and audit logging to reduce risks of unauthorised access, leakage, tampering or loss.

New-enquiry notifications only prompt the owner to check the admin — full contact details and project descriptions aren't emailed. If a security incident may affect your rights, we'll take remedial action and notify or report as required.

10

Updates, legal basis & contact

We update this notice when features, providers, data uses or legal requirements change, marking the latest revision at the top. Material changes get a more prominent notice.

This notice is drafted under applicable personal-information and cybersecurity rules. For questions about our handling, or to exercise your rights, email the contact page。

Contact

Questions? Tell us directly.

Describe your question and the relevant scope — we'll verify and respond promptly.

Submit a request