What we collect, why we collect it, and how to ask us to change or remove it.
We receive and store what you send us through this website: the email address the report goes to, and the Salesforce authorisation you paste in to connect an org. The authorisation is never displayed back to you, and you can revoke it yourself in your own Salesforce Setup at any time. Running a scan reads the configuration of the sandbox you nominate; we hold what the scan read and the report built from it. If you give us a name, role, company or phone number — in a quote request or by email — we keep those and our reply. We measure page views and page timings without cookies. There are no accounts on this website: there is nothing to sign up for and no password to set, so we hold no password of yours.
Your personal information will be used for the specific reasons stated below only.
We contact you about something you asked us for or bought: the report you ordered, a problem with a scan, a question you sent us, or a dispute to settle. We also contact you where the law requires it. There is no marketing list, no newsletter and no survey, so there is nothing to unsubscribe from. We reply by email, and by phone only if you gave us a number.
This website is served by Vercel, which runs the pages and the connect and checkout steps. Vercel holds the page-view and timing counts measured above, and none of the rest.
What you buy and what a scan finds — your order, your quote, the configuration read from your sandbox, the findings and the report — is stored in our database with Supabase, hosted in Ireland. The scans themselves run on n8n, which also keeps a working copy of what each step passed through. The checks that call for judgement send the configuration read from your org to Anthropic’s Claude models, which read it and return an assessment. Report emails are sent by Resend. Card details are handled by Stripe and are covered in the payments section below.
Each of those holds what it holds under its own terms. If you want to know what any of them has about you, or want it removed, email info@cloudhikers.com.
Reports and subscriptions are bought through this website. Checkout is hosted by Stripe, our payment processor: you enter your card details on Stripe’s own page rather than ours, and we do not collect or store payment card details at any point. What comes back to us is the fact of the payment, the amount, and identifiers for the order and for the customer record Stripe holds.
Buying a subscription creates a customer record at Stripe and a monthly charge that repeats until it is cancelled. Stripe holds that record and the payment history under its own privacy policy, published at stripe.com/privacy; we hold the identifiers that tie it to your order and the email address the reports go to.
Every monthly email carries a link to Stripe’s billing portal, where you can cancel. Cancelling stops the charge at the end of the month already paid for, and that month runs as normal.
You can control cookies through your browser settings. Firefox, Microsoft Edge, Google Chrome and Safari each publish instructions for viewing and changing what a site is allowed to store.
Why we are allowed to hold it. We hold your name and email because we need them to do the thing you asked us to do: answer an enquiry, run a sale, and send the report you bought. We hold the order and payment identifiers because we have to keep records of a sale. We hold the configuration read during a scan because it is what the report is made of. Where we contact you about something you did not ask for, we do that only if you have told us we may. Named in the language of the regulation, those grounds are contract, legal obligation and consent.
How long we keep it. Records of a sale are kept for as long as tax law requires, currently six years. The email address a report goes to is kept while your subscription runs, and afterwards until you ask us to remove it. Configuration read during a scan is held in the systems that produced the report, including our automation platform’s execution history; we do not hold it beyond what those systems retain, and we will delete what we can on request.
What you can ask for. You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to stop using it, and where we hold it because you asked us to do something, ask for it in a portable form. Write to info@cloudhikers.com and we will answer within a month. If you are not satisfied with our answer, you can complain to the Information Commissioner’s Office at ico.org.uk.
Last updated
This policy may change. A change takes effect when it is published here, and the date above is the last time that happened. We do not send a notice when it changes: there is no mailing list to send one to.
Thirty minutes with an expert who has done it before.
