Privacy Policy

This policy explains how WattleCloud Pty Ltd, trading as Wattle Cloud (“we”, “us” or “our”), handles personal information about you when you use our website, dashboard, game panel, command line tool, API and support.

We follow the Australian Privacy Principles in the Privacy Act 1988. If you're in the UK, the UK GDPR and the Data Protection Act 2018 also apply, and if you're in the European Economic Area (EEA), the EU GDPR. Under those laws, we're the controller of the personal information this policy describes.

This policy doesn't cover personal information inside the apps, databases and game servers you run with us, such as details of your app's users or your server's players. You're in charge of that information and we process it for you, as our Data Processing Agreement explains. Websites and apps hosted on Wattle Cloud have their own privacy policies.

Information you give us

• Account: your name, email address, sign-in details such as a password or passkey, two-factor settings, workspace names, and the email addresses of people you invite.
• Billing: your billing name and address, a business name and tax number if you give them, and your payment history. Card payments are handled by our payment processor, and we don't store your full card number.
• Support: the messages you send us, and our replies.
• Reports: what you tell us when you report abuse or a security problem.

Information we collect when you use the services

• Activity: actions in your account and workspaces, including the audit log of who did what, and when.
• Usage: the vCPU, memory, disk and outbound traffic your workloads use, so we can run the services and keep each workload within its plan.
• Technical information: IP addresses, browser and device details, and request and error logs from the dashboard, game panel, API and command line tool.

Our website doesn't use analytics or advertising trackers. Our hosting and network providers process your IP address to deliver its pages and protect it from attacks.

Information from others

• GitHub, if you connect it: your GitHub username, when your GitHub account was created, and access to the repositories you choose so we can deploy them.
• Our payment processor: whether a payment succeeded, and the results of fraud checks.
• Cloudflare, when you sign up, sign in or report abuse: the result of its check that you're a person and not an automated program (Turnstile).
• People who report abuse, which can include information about you or your content.
• Discord, if you join our Discord server: your Discord username and profile, and what you post in the server. Discord's own privacy policy covers how Discord handles your information.

You don't have to give us personal information, but without some of it we can't open an account for you, bill you or answer your questions. You can ask us a question without giving your name, as long as you give us a way to reply.

We don't sell personal information, rent it out, or use it for advertising.

Every marketing email has an unsubscribe link. Service emails, such as receipts and security notices, aren't marketing, so we keep sending them while your account is open.

We use automated checks to help prevent fraud and abuse. They can affect you:

• We refuse sign-ups from throwaway email services.
• Cloudflare Turnstile checks that you're a person when you sign up, sign in or report abuse.
• Our payment processor checks payment cards for fraud.
• We watch how workloads use CPU and the network, to spot cryptocurrency mining and attacks. A workload that looks like mining may be slowed down automatically, and we email you when that happens.
• We check the web addresses of sites we host for names that imitate well-known brands, and against Google's lists of phishing and malware sites (Web Risk). This sends the web address, not your details, to Google.

Apart from refusing throwaway email addresses and failed bot or card checks, these checks don't close accounts or remove content on their own: they alert our team, and a person decides what to do. If a decision like this affects you, you can ask a person to review it by emailing support@wattlecloud.com.

We share personal information only in these ways:

• With service providers that help us run Wattle Cloud, such as Cloudflare (which carries traffic to the services and protects them from attacks), our payment processor, and email and support tools. Our Service Providers page lists each one, what it does and where. They may use it only to provide their services to us.
• With people in your workspaces. Workspace owners and members can see activity in the workspace, including the audit log.
• With our professional advisers, such as lawyers, accountants and auditors.
• With authorities, when the law requires it or when it's needed to protect someone from serious harm. We check each request and share only what we must.
• With a business that takes over all or part of Wattle Cloud. It must protect your information as this policy describes, and we'll tell you before it happens.
• With anyone else, if you ask us to or agree to it.

We hold personal information electronically, in our own systems and those of our service providers. We're based in Australia. Your apps, databases and game servers run in the region you choose: Brisbane (Australia), the United Kingdom, or Europe (France).

Some of our service providers store or access personal information in other countries, including the United States and the countries where Cloudflare's network operates. Encrypted copies of backups are stored in Oceania. If you're in the UK or EEA, your information is also sent to Australia, where we're based. Our Service Providers page says where each provider operates.

When we send personal information overseas, we take reasonable steps to make sure it's protected in line with the Australian Privacy Principles. For information from the UK or EEA, we rely on adequacy decisions where they exist and, where they don't, on safeguards the law recognises, such as the UK International Data Transfer Agreement or Addendum and the EU standard contractual clauses.

• Account information: while your account is open. After it closes, we delete it once the 30-day export period ends, apart from the records below.
• Billing and tax records: 5 years, as tax and company laws in Australia and the UK require.
• Logs of what your services print: 7 days.
• Hourly usage figures: 30 days. The totals on your invoices are billing records.
• Signed-in sessions, with their IP address and browser: until they expire or you sign out, and at most 7 days.
• Backups of databases and volumes: 7 days, and their encrypted off-site copies about a day longer.
• The audit log of actions in a workspace: while the workspace exists.
• Other technical logs: only as long as we need them to run and secure the services.
• Support messages and reports: as long as we need them to deal with the matter, and longer if the law requires it or a dispute is ongoing.

When we no longer need personal information, we delete it or make it anonymous.

We use security measures that suit the risk, including encrypted connections, access controls, two-factor sign-in and passkeys, an audit log, and sandboxes and separate networks for customer workloads. Our team accesses personal information only when their work needs it.

No system is perfectly secure. If a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. For people in the UK and EEA, we tell the relevant regulator within 72 hours where the law requires, and tell you without undue delay if there's a high risk to you.

Wherever you are, you can ask us to:

• give you a copy of the personal information we hold about you
• correct information that's wrong, out of date or incomplete
• delete your information, unless we need to keep it for a reason this policy describes
• stop sending you marketing emails, which you can also do with the unsubscribe link

If you're in the UK or EEA, you can also ask us to restrict or stop using your information, object to how we use it, or give you your information in a format you can take to another service. Where we rely on your consent, you can withdraw it at any time. That doesn't affect what we did before.

To make a request, email support@wattlecloud.com. We may need to confirm who you are first. We'll respond within one month, and there's no charge unless a request is clearly unfounded or excessive. If we can't do what you ask, we'll explain why and tell you how to complain.

You can update most of your account details yourself in the dashboard. To close your account, email support@wattlecloud.com.

Our services are for adults. You must be at least 18 to open an account, and we don't knowingly collect personal information from children. If you think a child has given us personal information, email support@wattlecloud.com and we'll delete it.

Our website doesn't use analytics or advertising cookies. Our Cookie Policy explains the little we store in your browser.

We'll post any changes here and update the date at the top. If a change is significant, we'll email account holders before it takes effect.

For privacy questions, requests or complaints, email support@wattlecloud.com with “Privacy” in the subject line. We'll look into a complaint and reply within one month with what we found and what we'll do.

Business

WattleCloud Pty Ltd, trading as Wattle Cloud

ABN

97 703 308 605

Address

PO Box 827, Upper Coomera QLD 4209

Email

support@wattlecloud.com

If you're not satisfied with our response, you can complain to a regulator: in Australia, the Office of the Australian Information Commissioner; in the UK, the Information Commissioner's Office; in the EEA, your local data protection authority.