Privacy Policy

1. Introduction

At OSS Cloud, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud services platform.

We are committed to protecting your personal data and being transparent about our information practices. This policy applies to all users of OSS Cloud services.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Name and email address
• Phone number (optional)
• Billing information for paid services
• Account credentials (securely hashed)

2.2 Usage Information

We automatically collect:

• Service usage logs and timestamps
• API calls and integration activity
• IP addresses and device information
• Subscription and billing history
• Feature usage patterns

2.3 Technical Data

For service operation, we collect:

• Server logs and performance metrics
• Error reports and debugging information
• Network traffic patterns (anonymized)
• Service-specific usage data

3. How We Use Your Information

We use collected information to:

• Provide and maintain cloud services
• Process payments and send invoices
• Send service notifications and updates
• Monitor and improve service performance
• Detect and prevent fraud or abuse
• Respond to support requests
• Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

• Service providers: Payment processors, hosting providers, and analytics services under confidentiality agreements
• Legal authorities: When required by law or to protect rights and safety
• Business transfers: In connection with merger, acquisition, or sale of assets (with notice)

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

5. Service-Specific Data

Different OSS Cloud services may collect specific usage data necessary for their operation:

• Network services: Connection logs, bandwidth usage
• API services: Request logs, endpoint usage
• Analytics services: Aggregated metrics, performance data
• Management tools: Configuration data, access patterns

Service-specific data is retained for operational purposes and may be anonymized for service improvement analytics. Retention periods vary by service type and are disclosed in service-specific documentation.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and penetration testing
• Access controls and authentication requirements
• Employee training on data protection
• Incident response procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you promptly of any data breach.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request data portability
• Withdraw consent (where processing is consent-based)

To exercise these rights, contact us at privacy@oss.co.za. We will respond within 30 days.

8. Cookies and Tracking

Our portal uses essential cookies for:

• Session management and authentication
• Security (CSRF protection)
• Service functionality

We do not use tracking cookies for advertising purposes. You can control cookie settings in your browser.

9. International Data Transfers

Your data may be processed in countries outside South Africa. We ensure appropriate safeguards are in place, including standard contractual clauses and adherence to applicable data protection laws.

10. Data Retention

We retain personal information for as long as necessary to:

• Provide services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we delete your personal data within 30 days, except where retention is required by law or necessary for legitimate business purposes.

11. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the new policy on our website
• Sending email notification to registered users
• Updating the "Last updated" date

Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or concerns:

You may also lodge a complaint with the Information Regulator of South Africa if you believe your privacy rights have been violated.

This Privacy Policy is designed to help you understand how we collect, use, and safeguard your personal information.