Effective date: June 6, 2026
Last updated: June 6, 2026
This Privacy Policy describes how Cloudimesh ("Cloudimesh", "we", "us", or "our") collects, uses, discloses, retains, and protects personal information when you use the Cloudimesh cloud and infrastructure management portal (the "Service").
This Policy applies to users who register, sign in, or interact with the Service, including administrators, approvers, project members, and invited team members.
By using the Service, you acknowledge this Privacy Policy. If you do not agree, do not use the Service.
Cloudimesh is typically deployed for organizational use. In most cases:
For privacy requests relating to employment or organizational data, contact your Cloudimesh administrator first. Cloudimesh will assist organizations as required by applicable law and contractual obligations.
The data we process depends on how your organization configures the Service and which features you use.
If your organization enables LDAP/AD sign-in, we may:
We do not store your corporate directory password in Cloudimesh when you authenticate via LDAP/AD.
If you use Google or Facebook to sign in, we receive information from the provider needed to authenticate you, typically including:
We use this information to create or link your Cloudimesh account. The provider's own privacy policy governs its processing.
When you use project and approval features, we process information such as:
This data may include business information about your organization's infrastructure plans. It may also indirectly relate to identifiable individuals (for example, when you are named as submitter, approver, or project owner).
When administrators connect cloud and inventory systems, the Service may store and display data retrieved from those systems, including for example:
This information is generally infrastructure and operational metadata. It may include hostnames, IP-related attributes, resource identifiers, and utilization figures depending on import scope.
Tenant administrators may configure settings that can contain organizational or personal data, including:
We automatically collect certain technical information when you use the Service, including:
We use this data to operate, secure, troubleshoot, and improve the Service.
We process email addresses and message content when the Service sends:
We use personal and operational information to:
| Purpose | Examples |
|---|---|
| Provide the Service | Authentication, tenant switching, project management, VM requests, approvals, inventory views, dashboards, and file downloads |
| Enforce access controls | Roles, permissions, group mappings, LDAP authorization, API token scoping, and account disablement |
| Connect integrations | vCenter, Nutanix, Huawei, AWS, orchestration tools, directory services, and email delivery |
| Calculate and display costs | Cost breakdowns, chargeback analytics, catalog pricing, and reporting |
| Communicate with you | In-app notifications, email alerts, and invitation messages |
| Maintain security | Fraud prevention, abuse detection, session protection, audit trails, and incident investigation |
| Comply with law | Responding to lawful requests and regulatory obligations |
| Improve reliability | Debugging, performance monitoring, and feature development |
We do not sell personal information. We do not use Cloudimesh project or infrastructure data for unrelated third-party advertising.
Where applicable data protection law requires a legal basis, we rely on one or more of the following:
Your organization may determine additional legal bases when acting as controller for employee data.
We may share information in the following circumstances:
Project data, approvals, inventory insight, and administrative records are visible to users according to tenant membership, project membership, and role permissions configured by administrators.
We use infrastructure and software providers to host, operate, secure, email, queue background jobs, and support the Service (for example, application hosting, database storage, Redis/queue workers, PDF generation, and email transport). These providers process data under contractual safeguards and only as needed to deliver the Service.
Data is transmitted to systems your administrators connect, such as:
Those systems process data under their own terms and your organization's agreements with them.
We may disclose information if we believe in good faith that disclosure is necessary to:
If Cloudimesh is involved in a merger, acquisition, financing, or sale of assets, information may be transferred subject to continued protection consistent with this Policy.
Cloudimesh may process and store information in countries other than where you are located, including where our hosting providers operate. Where required, we implement appropriate safeguards for cross-border transfers, such as contractual clauses or equivalent mechanisms agreed with your organization.
We retain information for as long as necessary to:
Retention periods may vary by data type and tenant configuration. For example:
Administrators may export or request deletion subject to organizational policy and legal requirements.
We implement administrative, technical, and organizational measures designed to protect information, including:
No method of transmission or storage is completely secure. You must protect your credentials, 2FA devices, and API tokens.
Report suspected security incidents to your administrator and Cloudimesh support promptly.
Depending on your location and organizational setup, you may have rights to:
Because Cloudimesh is organization-managed, many requests must be submitted through your Cloudimesh administrator, who controls tenant data and user lifecycle.
You may also:
We will respond to valid requests within timeframes required by applicable law.
The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can take appropriate action.
The Service may link to third-party websites or rely on third-party platforms. This Policy does not govern those services. Review the privacy policies of vCenter, public cloud providers, identity providers, and other integrated systems separately.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice in the Service or through your administrator.
Continued use after the effective date of an update constitutes acceptance unless applicable law requires explicit consent.
For privacy questions or requests:
If you are an administrator seeking a data processing addendum or subprocessor information for enterprise deployment, contact Cloudimesh through the same channels.