1. Data controller
The data controller is StandByte EOOD, UIC 202982620, 66 Budapeshta Str., 1202 Sofia, Bulgaria. Privacy questions and data-subject requests can be sent to support@cloudbalkan.com.
2. Personal data we process
- Account and identity data, such as name, email address, account identifiers and organization membership.
- Billing and transaction data, including Account Credits, payment references, invoices or billing-profile information. Payment-card details entered on a hosted payment page are processed by the payment provider rather than stored as full card data by CloudBalkan.
- Service and infrastructure metadata needed to provide Cloud Servers, Cloud Storage, Public Cloud Network, Cloud DNS, Domain Names and Web Hosting.
- Support and administrative communications you send to CloudBalkan.
- Security and technical data such as IP addresses, authentication events, browser/session information, audit records and logs needed to secure and operate the Services.
- AI Operator data, including prompts you submit, operational context required to answer a request, proposed or executed actions, results, confirmations and usage metadata.
3. Why we process personal data
- To create and administer accounts and provide the Services you request.
- To process payments, Account Credits, billing and service renewals.
- To authenticate users, prevent fraud and abuse, investigate incidents and protect the platform.
- To provide support and communicate about your account, incidents, maintenance and important service changes.
- To operate AI Operator and maintain the operational history needed for confirmations, auditability, troubleshooting and safe execution of actions.
- To comply with accounting, tax, regulatory and lawful disclosure obligations.
- To improve the reliability and usability of CloudBalkan where this is compatible with your rights and reasonable expectations.
4. Legal bases
Depending on the processing activity, CloudBalkan relies on performance of a contract, compliance with legal obligations, legitimate interests in operating and securing the service, or consent where consent is required. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.
5. Service providers and recipients
CloudBalkan uses service providers where necessary to operate the Services. These can include payment processors such as Stripe, email and security providers, and an AI model service provider when you use AI Operator. Providers receive only the data reasonably necessary for the service they perform and are subject to appropriate contractual and security requirements.
CloudBalkan may also disclose information where required by law, a valid court or authority request, or where reasonably necessary to protect customers, third parties or the CloudBalkan platform.
6. AI Operator and operational data
When you use AI Operator, your prompt and the operational context necessary to process the request may be sent to an AI model service provider. Do not place unrelated secrets, passwords, private keys or sensitive personal data in an AI Operator prompt.
CloudBalkan may retain separate audit and action records showing which operations were proposed, confirmed, executed or rejected. These records support security, customer support and accountability.
7. International data transfers
Some service providers may process data outside Bulgaria or the European Economic Area. Where required, CloudBalkan uses an appropriate transfer mechanism and contractual safeguards for those transfers.
8. Retention
CloudBalkan keeps personal data only for as long as necessary for the purpose for which it was collected, to maintain service and security records, to resolve disputes, and to meet accounting, tax and other legal obligations. Retention periods vary by data category and service.
Deleting a customer Service does not necessarily delete billing, security, audit or legal records that CloudBalkan is required or reasonably entitled to retain.
9. Cookies and session technologies
CloudBalkan uses cookies or similar browser storage that are necessary for functions such as sessions, authentication, security and account preferences. If non-essential analytics or marketing technologies are introduced, CloudBalkan will provide the disclosures and consent controls required by applicable law.
10. Your data-protection rights
Subject to applicable law, you may have rights to access, correct or erase personal data, restrict processing, receive portable data, object to certain processing and withdraw consent. You may also lodge a complaint with the competent supervisory authority, including the Bulgarian Commission for Personal Data Protection (CPDP).
To exercise a right, contact support@cloudbalkan.com. CloudBalkan may need to verify your identity before completing a request.
11. Security
CloudBalkan uses technical and organizational measures designed to protect personal data and customer accounts. No internet service can guarantee absolute security, so customers should also use strong unique credentials, two-factor authentication where available and appropriate access controls for their organizations.
12. Changes to this policy
CloudBalkan may update this Privacy Policy when services, legal requirements or data-processing practices change. The current version and update date are published on this page.