This policy explains how CloudWizard ("we", "us") handles personal data in two contexts: (1) when you visit cloudwizard.eu, buy a module, write to us or subscribe to our newsletter, and (2) when you run the CloudWizard Email Suite software on your own server.
The controller for data collected on cloudwizard.eu is John Roland, Simeonovo, Yambol, Bulgaria. Contact: contact form or hello@cloudwizard.eu.
| Data | Purpose and legal basis | Retention |
|---|---|---|
| Name and email at checkout | Process your purchase and deliver the download and license key (contract) | As required for accounting and tax law |
| Payment details | Processed entirely by Stripe. We do not store card numbers (contract) | Held by Stripe under its own policy |
| Contact form: name, email, topic, message, IP address | Answer your question. The IP address is used only to limit spam (your consent; our legitimate interest in preventing abuse) | Up to 12 months after the conversation ends, then deleted |
| Newsletter signup: email address, optional name, and a consent record with the time of confirmation, your IP address and the form used | Send product news and updates, and prove your consent (consent, Art. 6(1)(a)) | Until you unsubscribe. After that we keep only your address on a suppression list so you are not mailed again |
| Signup funnel counts | Count how many people see, submit and confirm a form. One number per form per day, with no cookie, no IP address and nothing else about the visitor | Kept as statistics |
| Support emails | Respond to your questions (contract or legitimate interest) | Until resolved plus a reasonable archive period |
| Server logs | Security and error diagnosis (legitimate interest) | Short rolling period |
Newsletter signups use double opt-in: you are subscribed only after you click the link in the confirmation email. Every email contains an unsubscribe link, and you can withdraw consent at any time. Withdrawal does not affect anything done before it.
When you install and run the modules, they process data entirely within your own infrastructure, for example:
We do not receive this data. For it, you are the controller under GDPR, not CloudWizard.
The software makes only these outside connections, other than to the mail servers and databases you configure:
The website uses only what it needs. A signup popup remembers in your browser's local storage that you closed it, so it does not keep reappearing. Full-page signup forms that run an A/B test set a cookie so you always see the same variant. Checkout may use functional cookies. We do not use advertising cookies. The software on your server uses functional session cookies for the admin login only.
| Service | Purpose |
|---|---|
| Stripe | Payment processing for purchases on cloudwizard.eu |
| Our hosting | cloudwizard.eu runs on a server we operate. The data above is stored there |
| Anthropic | Only when you use AI Writer, with your own API key (see section 4) |
| Your own hosting and mail providers | Run the software once you install it, outside our control |
We do not sell personal data.
If you use the software to process personal data of your own subscribers, you decide what is collected and why. We recommend that you:
We protect the website with TLS, restricted admin access and secure payment processing through Stripe. Security of data processed by software you install is your responsibility, since it resides on infrastructure you control. The installation guides include security recommendations.
For data we hold about you, you have the right to access it, correct it, have it deleted (subject to legal retention such as invoicing records), restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To use these rights, write through the contact form or to hello@cloudwizard.eu.
You may also complain to the supervisory authority. In Bulgaria this is the Commission for Personal Data Protection (КЗЛД), www.cpdp.bg, or to the authority in your own EU country.
Our website and software are not directed at children under 16. We do not knowingly collect data from children.
We may update this policy. Material changes are posted on this page with a new revision date.