Privacy Policy

This Privacy Policy explains how KloudMate Technologies, Inc. ("KloudMate", "we", "us", or "our") collects, uses, shares, and protects personal data when you visit kloudmate.com and our related sites, sign up for an account, or use the KloudMate observability platform and related products and services (together, the "Services").

It also explains the rights and choices you have over your personal data. If you use KloudMate on behalf of an organization (for example, your employer), that organization's agreement with us governs its use of the Services, and this Policy describes how we handle personal data within that relationship.

In this Policy, "personal data" (or "personal information") means information that identifies, relates to, or can reasonably be linked to an identified or identifiable individual.

Who we are

KloudMate Technologies, Inc. is a Delaware corporation and the entity responsible for the personal data described in this Policy, except where we act as a processor on behalf of our customers (see "Our two roles" below).

You can reach us at:

• Email: hello@kloudmate.com
• United States: 919 North Market Street, Suite 950, Wilmington, DE 19801
• India: No. 427, Ground Floor, Novel MSR Park, Sy. No. 93/9, Varthur Main Road, Munnekolalu, Marathahalli, Bangalore, Karnataka – 560037

Our two roles

How we handle personal data depends on the context:

• As a controller. For our website, marketing, sales, account registration, billing, and support, we decide why and how personal data is processed. For that data, we are the "controller" (or "business" under US laws), and this Policy applies in full.
• As a processor. When a customer sends telemetry and other content into the platform (for example, logs, metrics, traces, error events, and real-user-monitoring data), that content may contain personal data about the customer's own users. We process that "Customer Data" only on the customer's instructions, as their "processor" (or "service provider"), under the customer's agreement with us, including a Data Processing Addendum (DPA) where a customer requires one. The customer is responsible for that data and for providing any required notices to, and obtaining any required consent from, its own users.

If you are an end user of a KloudMate customer and have a question about your data, please contact that organization directly, as they control it.

Personal data we collect

Information you give us

• Contact and inquiries. When you fill in a contact or demo form or email us, we collect your name, email address, company, and the contents of your message.
• Account registration. When you create an account, we collect your name, work email, password, company name, and role. You can also sign in through your organization's single sign-on (SAML or OIDC — for example Google Workspace, Okta, or Microsoft Entra ID), in which case your identity provider shares your email and name with us. We support multi-factor authentication.
• Billing. For paid plans, we collect billing contact details and transaction records. Card payments are processed by Stripe; we do not store full card numbers.
• Newsletter and events. If you subscribe to updates or register for an event, we collect your email address and related preferences.
• Support and communications. Records of your requests, correspondence, and the content you share with our team.
• Careers. If you apply for a role, we collect the information in your application and CV.

Information we collect automatically

When you visit our website or use the Services, we and our providers collect:

• Device and connection data such as IP address, browser type and version, operating system, language, and referring pages.
• Usage data such as pages viewed, links clicked, time on page, and access dates and times.
• Cookies and similar technologies, as described in our Cookie Policy.
• Real User Monitoring (RUM). Our website runs KloudMate's own RUM, which records performance and interaction data and may capture session replays. Session replays are configured to mask all form inputs, so we do not capture what you type into fields.

Customer Data (telemetry)

The platform ingests the telemetry and content our customers choose to send. This Customer Data may incidentally contain personal data (for example, a user ID or IP address inside a log line). We process it as a processor under the customer's instructions and agreement, and we do not use it to build profiles or for our own purposes.

AI features. When a customer uses our AI assistant or automated investigation (Auto-RCA) features, relevant telemetry and context are sent to third-party large-language-model providers — currently Google, OpenAI, Anthropic, and OpenRouter (which routes requests to underlying model providers) — to generate the response. We send this data through those providers' business or API offerings, only to operate the feature, and they do not use it to train their models. Customers choose whether to enable and use these AI features.

How and why we use personal data

We use personal data to:

• Provide and operate the Services, including creating and securing your account and delivering support.
• Process transactions and manage billing for paid plans.
• Communicate with you, including service and security notices, responses to your requests, and, where permitted, product updates and marketing.
• Understand and improve our website and Services through analytics and product research.
• Keep the Services secure, including detecting, investigating, and preventing fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our terms.

Where the EU/UK General Data Protection Regulation (GDPR) applies, we rely on these legal bases: performance of a contract, to provide the Services you or your organization requested; legitimate interests, to operate, secure, and improve our Services; consent, for optional cookies and marketing emails, which you can withdraw at any time; and legal obligation, where processing is required by law.

Cookies and similar technologies

We use cookies and similar technologies to run the site, remember preferences, and measure usage. We use Google Analytics 4 and Google Tag Manager for analytics, and Google reCAPTCHA to protect forms from abuse. We do not use advertising or cross-context behavioral retargeting cookies, and we do not sell or share personal data for targeted advertising.

For details on the cookies we set and how to control them, see our Cookie Policy. Most browsers let you refuse or delete cookies; some features may not work without them.

How we share personal data

We do not sell your personal data. We share it only in these situations:

• Service providers and sub-processors. Vendors that process personal data on our behalf under contract, including:
  • Cloud hosting and infrastructure — Amazon Web Services hosts the platform in the United States; Google Cloud / Firebase hosts our marketing website.
  • AI / large-language-model providers — Google, OpenAI, Anthropic, and OpenRouter power the AI assistant and automated investigation features (see "Customer Data").
  • Payments — Stripe, and cloud marketplaces such as AWS Marketplace where you purchase through them.
  • Email — SendGrid for product and transactional email, and EmailJS for website contact-form messages.
  • Analytics and support — Google (Google Analytics, Tag Manager, reCAPTCHA) on our website, Segment for product analytics, and Intercom for support and in-product messaging.
  • Voice and phone verification — Telnyx and EnableX for on-call voice notifications and phone-based verification codes.
  • Notification delivery you configure — Slack, Microsoft Teams, and Jira, when you connect them to receive alerts.
• Within your organization. Account administrators of a KloudMate customer can access that organization's account and usage information.
• Legal and safety. Where we believe disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of KloudMate, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to this Policy.

A current list of platform sub-processors is available on request.

Google user data

You can connect a Google account to KloudMate in two ways: by signing in through your organization's Google Workspace (single sign-on), and by connecting Google Cloud as a monitoring data source. When you do, Google shares a limited set of information with us — such as your email address and name, and, for a data-source connection, authorization to read the Google Cloud monitoring data you select.

We use Google user data only to provide, secure, and support the Services you connect it to. We do not sell it, and we do not use it for advertising or to train generalized artificial-intelligence or machine-learning models.

We share Google user data only with:

• service providers that process it on our behalf to run the Services (for example, our cloud hosting and authentication providers), under confidentiality obligations;
• authorities or other parties where required by law or legal process; and
• a successor entity in connection with a merger, acquisition, or sale of assets.

KloudMate's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can review or revoke KloudMate's access to your Google account at any time from your Google Account permissions.

International data transfers

We host Customer Data in the United States, our team also operates from India, and we work with service providers in other countries, so your personal data may be transferred to and processed outside your home country, including in countries whose data-protection laws differ from yours. Where we transfer personal data from the EEA, the UK, or Switzerland to a country without an adequacy decision (such as the United States), we rely on an appropriate safeguard, such as the European Commission's Standard Contractual Clauses together with the UK Addendum where relevant. You can ask us for a copy of the safeguards we use with the contact details above.

How long we keep personal data

We keep personal data only as long as necessary for the purposes described in this Policy, then delete or anonymize it.

• Customer Data (telemetry) is retained for the data-retention period of the plan the customer selects, and is deleted after that period.
• Account, contact, and billing data is kept while your account or relationship with us is active, and for a reasonable period afterward to meet legal, tax, and security needs.
• Website analytics is kept for the retention period configured with our analytics provider.

How we protect personal data

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, use, alteration, and disclosure, including access controls, encryption in transit, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities where required by law.

Your privacy rights

Your rights depend on where you live. We honor the rights that apply to you, and we will not discriminate against you for exercising them. In general, you can ask us to access, correct, or delete your personal data, or object to certain uses, by contacting us.

EEA, UK, and Switzerland (GDPR)

If you are in the EEA, the UK, or Switzerland, you have the right to access, correct, erase, restrict, or object to the processing of your personal data; to receive it in a portable format; and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local data-protection supervisory authority, though we ask that you contact us first so we can help.

California (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know and access the categories and specific pieces of personal information we collect, use, and disclose.
• Delete personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
• Limit the use of sensitive personal information. We do not use sensitive personal information to infer characteristics.
• Non-discrimination for exercising your rights.

In the past 12 months, we have collected the categories of personal information described in "Personal data we collect" (identifiers, commercial information, internet activity, and professional information) for the business purposes described above, and disclosed them to the service providers listed above. You may use an authorized agent to submit a request on your behalf.

India (Digital Personal Data Protection Act)

If you are in India, you have the right to access, correct, update, and erase your personal data, to nominate another person to exercise your rights, and to grievance redressal. To raise a grievance, contact our grievance officer at hello@kloudmate.com; we will respond within the timelines required by law.

How to exercise your rights

Email us at hello@kloudmate.com or write to one of the addresses above. We will verify your request, respond within the time required by applicable law, and may ask for information to confirm your identity. These requests are free unless the law allows a fee.

Children's privacy

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.

Automated decision-making

We do not use your personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on you.

Do Not Track and Global Privacy Control

Because there is no common industry standard for Do Not Track, our website does not respond to Do Not Track signals. Where required by law, we treat recognized opt-out preference signals, such as Global Privacy Control (GPC), as a valid request to opt out for that browser.

Third-party links and services

Our website may link to or embed third-party sites and content (for example, our Product Hunt badge, documentation, or blog). Those third parties handle your data under their own privacy policies, which we do not control.

Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the Services after an update means you accept the revised Policy.

Contact us

If you have questions, requests, or complaints about this Policy or your personal data, contact us at hello@kloudmate.com, or by mail at KloudMate Technologies, Inc., 919 North Market Street, Suite 950, Wilmington, DE 19801.