Privacy Policy

Your privacy matters. Learn how we collect, use, and protect your information.

Important: This Privacy Policy describes how Cloudspace collects, uses, and protects your personal information. By using our services, you consent to the practices described here.

Last updated: February 16, 2026

Key Points

  • We collect account, billing, usage, and support information to provide our services
  • Your data can be hosted in Canadian data centers for residency compliance
  • We don't sell your personal information to third parties
  • You have rights to access, correct, and delete your personal information

1. Overview and Scope

Cloudspace ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights regarding your data.

This policy applies to:

  • Our website (cloudspace.ca)
  • Cloud infrastructure services (VPS, private cloud, GPU compute, managed services)
  • Customer portals, dashboards, and control panels
  • Support interactions and communications

By using Cloudspace services, you consent to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect several types of information to provide, improve, and secure our services.

2.1 Account Information

When you create a Cloudspace account, we collect:

  • Contact details: Name, email address, phone number, company name (if applicable)
  • Login credentials: Username, password (hashed and encrypted), two-factor authentication settings
  • Profile information: Account preferences, notification settings, timezone

2.2 Billing and Payment Information

To process payments, we collect:

  • Billing address: Street address, city, province/state, postal code, country
  • Payment details: Credit card information (processed and stored by our PCI-compliant payment processor—we do not store full card numbers), PayPal or other payment method identifiers
  • Tax information: GST/HST numbers for Canadian businesses, VAT numbers for international customers
  • Transaction history: Invoices, payment receipts, credits, refunds

2.3 Usage and Technical Information

When you use our services, we automatically collect:

  • Service usage: Resources provisioned (VPS specifications, storage, bandwidth), uptime, service configurations, API calls
  • Log data: IP addresses, access times, control panel activity, authentication attempts, error logs
  • Device and browser information: User agent, operating system, browser type and version, screen resolution
  • Performance metrics: CPU usage, memory consumption, bandwidth utilization, disk I/O (aggregated for infrastructure health monitoring)

Important: We do not access the content stored on your virtual servers (files, databases, applications) unless you explicitly grant us permission for support purposes or as required by law.

2.4 Support and Communication Data

When you contact support or interact with us, we collect:

  • Support ticket content (messages, attachments, screenshots)
  • Email correspondence
  • Chat transcripts (if applicable)
  • Feedback, surveys, and feature requests

3. How We Use Information

We use the information we collect for the following purposes:

3.1 Service Delivery

  • Provisioning and managing cloud infrastructure (VPS, private cloud, GPU compute)
  • Processing payments and managing billing cycles
  • Authenticating users and securing accounts
  • Providing technical support and responding to inquiries

3.2 Service Improvement

  • Monitoring infrastructure performance and uptime
  • Identifying and resolving technical issues
  • Analyzing usage patterns to optimize capacity and features
  • Developing new services and enhancements

3.3 Security and Compliance

  • Detecting and preventing fraud, abuse, and unauthorized access
  • Investigating security incidents and policy violations
  • Complying with legal obligations and responding to lawful requests
  • Enforcing our Terms of Service and Acceptable Use Policy

3.4 Communication

  • Sending service notifications (provisioning confirmations, maintenance alerts, security updates)
  • Providing billing invoices and payment reminders
  • Delivering support responses and ticket updates
  • Sharing important policy changes or service announcements

3.5 Marketing (With Consent)

With your explicit consent, we may use your email address to send:

  • Product updates and feature announcements
  • Educational content (blog posts, tutorials, webinars)
  • Promotional offers and discounts

You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email or updating your preferences in your account dashboard.

4. Cookies and Analytics

We use cookies and similar tracking technologies to enhance your experience and understand how our website and services are used.

4.1 Types of Cookies We Use

  • Essential cookies: Required for login, session management, and security (e.g., authentication tokens, CSRF protection)
  • Functional cookies: Remember your preferences (language, region, dashboard layout)
  • Analytics cookies: Help us understand website traffic, popular pages, and user journeys (we use privacy-respecting analytics tools)
  • Advertising cookies: Used for retargeting campaigns (only with your consent, if applicable)

4.2 Analytics Tools

We may use third-party analytics services (such as Google Analytics, Plausible, or similar) to collect aggregated usage statistics. These tools help us improve our website and services. Analytics data is anonymized where possible and does not include personally identifiable information unless you voluntarily provide it (e.g., via form submissions).

4.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect your ability to use certain features of our services. Most browsers allow you to block third-party cookies while keeping first-party cookies enabled.

5. Data Residency

Cloudspace offers Canadian data residency options to help you meet regulatory and compliance requirements.

5.1 Infrastructure and Customer Data

When you select a Canadian region during service provisioning:

  • Your virtual servers, storage, and primary data remain in Canadian data centers
  • Compute resources do not leave Canada unless you explicitly configure external connections
  • Backups (if using our backup services) are stored in the same Canadian region by default

5.2 Account and Billing Data

Some operational systems may process data outside Canada:

  • Payment processing: Credit card transactions are processed by third-party payment processors (e.g., Stripe, PayPal) that may store data in the US or other jurisdictions in compliance with PCI-DSS standards
  • Support systems: Support ticket metadata and communications may be processed using third-party tools (e.g., help desk software) that may have servers outside Canada
  • Analytics and monitoring: Aggregated, anonymized usage data may be processed by third-party analytics providers

We select vendors that provide strong data protection and comply with applicable privacy laws. Where data is transferred outside Canada, we ensure appropriate safeguards are in place (see Section 10).

6. Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may share your information in the following limited circumstances:

6.1 Service Providers

We share information with trusted third-party vendors who help us operate our business:

  • Payment processors (for billing and invoicing)
  • Data center providers (for infrastructure hosting)
  • Support and communication tools (for customer service)
  • Security and monitoring services (for threat detection)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

6.2 Legal Obligations

We may disclose information when required by law or legal process:

  • Court orders, subpoenas, or search warrants
  • Law enforcement requests (where legally valid)
  • Regulatory investigations or compliance audits
  • Protection of our rights, property, or safety, or that of our customers or the public

Where permitted by law, we will notify you of legal requests for your data unless prohibited by the order itself.

6.3 Business Transfers

If Cloudspace is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the new owner. We will notify you via email and/or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share information with third parties when you provide explicit consent (e.g., integrating third-party services with your account, participating in co-marketing initiatives).

7. Data Retention

We retain your personal information for as long as necessary to provide services and fulfill the purposes outlined in this policy.

7.1 Active Accounts

While your account is active, we retain:

  • Account and profile information
  • Billing and transaction history (for the duration of the account plus 7 years for tax and accounting purposes)
  • Usage logs (typically 90 days to 1 year, depending on log type)
  • Support ticket history

7.2 After Account Closure

When you close your account or cancel services:

  • Customer data: Data on virtual servers is deleted within 7 days (see Terms of Service)
  • Account information: Deleted within 30 days, except as required for legal, tax, or fraud prevention purposes
  • Billing records: Retained for 7 years to comply with Canadian tax laws
  • Security logs: May be retained longer if related to fraud investigations or legal matters

7.3 Legal Holds

If your information is subject to a legal hold (e.g., pending litigation, regulatory investigation), we will retain it until the hold is lifted.

8. Security Safeguards

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, and destruction.

8.1 Technical Measures

  • Encryption: Data in transit is encrypted using TLS/SSL. Data at rest (databases, backups) is encrypted using AES-256 or equivalent
  • Access controls: Role-based access controls (RBAC) limit employee access to customer data on a need-to-know basis
  • Authentication: Strong password requirements, support for two-factor authentication (2FA)
  • Network security: Firewalls, intrusion detection/prevention systems, DDoS mitigation
  • Logging and monitoring: Security event logging, anomaly detection, regular security audits

8.2 Organizational Measures

  • Employee background checks and security training
  • Confidentiality agreements with staff and contractors
  • Regular security assessments and penetration testing
  • Incident response procedures

8.3 Your Responsibilities

Security is a shared responsibility. You must:

  • Use strong, unique passwords and enable 2FA
  • Keep your login credentials confidential
  • Secure your own servers, applications, and data
  • Promptly report any suspected security incidents

Note: No security system is 100% foolproof. While we strive to protect your information, we cannot guarantee absolute security.

9. Your Privacy Rights

You have rights regarding your personal information under Canadian privacy laws (including PIPEDA and provincial laws where applicable).

9.1 Access and Portability

You have the right to access your personal information and request a copy of the data we hold about you. You can export most of your data directly from your account dashboard. For additional information, contact us at privacy@cloudspace.ca.

9.2 Correction

You can update your account information, billing details, and preferences at any time through your account dashboard. If you need assistance correcting inaccurate information, contact our support team.

9.3 Deletion

You can request deletion of your personal information by closing your account or contacting us. Note that:

  • Some data must be retained for legal, tax, or fraud prevention purposes (e.g., billing records)
  • Deleted data cannot be recovered
  • We may retain aggregated, anonymized data for analytics

9.4 Objection and Restriction

You can object to certain uses of your information (e.g., marketing emails) or request that we restrict processing. Use the "unsubscribe" link in emails or update your account preferences.

9.5 Withdraw Consent

Where we rely on your consent (e.g., for marketing), you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

9.6 File a Complaint

If you believe we have mishandled your personal information, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada

Website: www.priv.gc.ca

Phone: 1-800-282-1376

10. International Data Transfers

Cloudspace is based in Canada, and our primary infrastructure is located in Canadian data centers. However, some third-party service providers (payment processors, support tools, analytics) may process data in other countries, including the United States and Europe.

When we transfer personal information outside Canada:

  • We ensure the recipient country provides adequate data protection or we implement safeguards (e.g., standard contractual clauses, Privacy Shield frameworks where applicable)
  • We select vendors that comply with applicable privacy laws and industry standards
  • We limit the amount of data transferred to what is strictly necessary

By using our services, you consent to these international transfers as described in this policy.

11. Children's Privacy

Cloudspace services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@cloudspace.ca. We will promptly delete such information from our systems.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

When we make material changes (those that affect how we collect, use, or share your personal information), we will:

  • Update the "Last updated" date at the top of this page
  • Notify you via email (if you have an active account)
  • Post a notice on our website or in your account dashboard

We encourage you to review this policy periodically. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

13. Contact Information and Privacy Requests

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Privacy Officer

Email: privacy@cloudspace.ca

General support: support@cloudspace.ca

Contact page: cloudspace.ca/contact

For privacy requests (access, correction, deletion), please include:

  • Your full name and account email
  • A clear description of your request
  • Proof of identity (to prevent unauthorized disclosure)

We will respond to verified requests within 30 days as required by Canadian privacy laws.

By using Cloudspace services, you acknowledge that you have read, understood, and agree to this Privacy Policy.