Cloudizero - High Performance Media Storage & Global Delivery

1. Cloudizero Privacy Principles

Your privacy is a fundamental human right. Cloudizero is architected around the core principle of Data Minimization: we strictly collect only what is essential to deliver high-performance media storage, presigned direct uploads, and worldwide edge streaming. We do not sell, rent, or monetize your personal data or your uploaded media assets under any circumstances.

2. Information We Collect

Account Data: Name, email address, and securely salted bcrypt password hashes when you create an account.
Workspace & Object Metadata: File filenames, byte sizes, MIME types, virtual folder trees, and project workspaces you establish.
Billing & Payment Information: Payment transactions are executed directly by Stripe Inc. Credit card details are tokenized and processed under PCI-DSS Level 1 compliance. Cloudizero servers never receive or store your raw payment card credentials.
Telemetry & Edge Request Logs: Anonymized IP addresses, User-Agent strings, and HTTP response metrics collected exclusively for DDoS mitigation and global edge health diagnostics.

3. Trusted Sub-processors

To operate global zero-egress media distribution, Cloudizero partners with rigorously vetted, SOC2/ISO compliant sub-processors:

Edge Object Storage & Anycast CDN

Direct binary ingestion via presigned URLs and global edge caching.

Managed Relational Database

Isolated relational metadata indexing with instant query execution.

Stripe Inc. (Payments)

PCI-DSS compliant subscription billing, invoicing, and tax handling.

Resend (Transactional Mail)

Delivering email verifications, password resets, and account alerts.

4. Your Rights (GDPR & CCPA Compliant)

Regardless of your geographic location, Cloudizero accords you complete statutory rights over your personal data:

Right to Access & Portability: Seamlessly download all uploaded files and retrieve metadata via the API at any time.
Right to Erasure (Right to be Forgotten): Deleting a project workspace or deleting your account from Account Settings triggers a permanent atomic purge across all storage nodes.
Right to Rectification: Edit your name, email, or credentials anytime via your account console.

5. Robust Security Safeguards

All transit is strictly enforced under TLS 1.3 encryption. Object binaries are encrypted with AES-256 at rest. API secret keys are cryptographically hashed using SHA-256 before storage — plaintext tokens are never readable once created.

6. Data Protection Officer (DPO) Contact