Privacy Policy

Your personal data and choices

Cloudbase collects and processes personal information to provide the platform, as described in the Privacy Policy. Cloudbase does not sell your personal information for money. Where the platform shares personal information in a way that qualifies as a “sale” or “sharing” (including sharing for cross-context behavioral advertising) under the California Consumer Privacy Act or a comparable state law, residents of those states have the right to opt out. Depending on your state, you may also have the right to know, access, correct, delete, and port your personal information, to limit the use of sensitive personal information, and to opt out of certain automated decision-making.

To exercise these rights, use the “Do Not Sell or Share My Personal Information” and privacy-request controls in the platform or contact Cloudbase. Cloudbase honors recognized opt-out preference signals (such as Global Privacy Control) where required by law.

Where Cloudbase engages vendors to process personal information on its behalf, they act as service providers or contractors under written agreements that restrict their use of the data to providing services to Cloudbase; such transfers are not a “sale.” Sensitive personal information is used and disclosed only as permitted by law.

Data security and breach notification

Security commitment and limits. Cloudbase implements administrative, technical, and physical safeguards designed to protect nonpublic personal information, consistent with the FTC Safeguards Rule, GLBA, and applicable law, including encryption in transit and at rest, access controls, and a written information security program. No method of transmission or storage is completely secure, however, and — to the fullest extent permitted by law — Cloudbase does not warrant that the platform is immune from unauthorized access, and is not liable for the unauthorized or criminal acts of third parties (including hacking, phishing, or credential theft not caused by Cloudbase’s failure to maintain reasonable safeguards) or for loss arising from a user’s or Provider’s failure to protect its own credentials. Except for liability that cannot be limited under applicable law, Cloudbase’s aggregate liability arising from a security incident is limited as set forth in the Terms of Service.

Incident response and notification. Cloudbase maintains an incident-response process. In the event of a security incident affecting personal information, Cloudbase will investigate, take reasonable remedial steps, and provide notification to affected parties and regulators as and when required by applicable federal and state law and by contract. Because each Provider is an independent financial institution (or a service provider to one), the Provider remains responsible for its own breach-notification, safeguards, and regulatory obligations with respect to its clients. Certain rights cannot be waived or limited by agreement — including the private right of action for breaches under California Civil Code § 1798.150 and analogous laws — and nothing in any disclaimer purports to do so.

Text and email communications

By providing a mobile number or email address, users may receive service messages and, where consented, marketing messages. Message and data rates may apply. Users may opt out of text messages at any time by replying STOP and may unsubscribe from marketing emails using the link provided. The Provider is responsible for obtaining any consent required before sending marketing communications through the platform.

Marketplace introductions and your contact information

When you request to be matched with, contact, or engage an independent Provider through the marketplace, you authorize Cloudbase to share the information reasonably necessary to make that introduction — which may include your name, contact details, and the information you submitted about your needs — with the matched Provider(s). Once your information is shared with a Provider at your direction, that Provider is an independent controller of that information and is responsible for its own privacy practices, communications, and compliance; Cloudbase does not control and is not responsible for how a Provider uses information you choose to share with it. Providers who contact you through the marketplace are responsible for honoring your communication preferences and applicable marketing-consent laws. If you do not want your information shared with a Provider, do not initiate a match or contact.