Privacy Policy

1. Introduction

Intu Cloud by CyberSapient ("we", "us", or "our") is committed to protecting the privacy of our users ("you", "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud optimization services and managed services (collectively, the "Service"). By using our Service, you consent to the data practices described in this policy.

2. Information We Collect

We collect various types of information to provide and improve our Service, including:

• Personal Data: Information that identifies you, such as your name, email address, phone number, job title, company name, and billing information.
• Account Data: Information related to your account, including login credentials, account preferences, and subscription details.
• Usage Data: Information on how the Service is accessed and used, including IP address, browser type, pages visited, features used, and time spent on pages.
• Technical Data: Information about your device, including device type, operating system, unique device identifiers, and network information.
• Workload Data: Data related to your cloud workloads, including configurations, performance metrics, usage statistics, and optimization recommendations.
• Cloud Provider Data: Information from your connected cloud provider accounts, such as resource utilization, cost data, and account structures.
• Communication Data: Content of communications you send to us, such as support requests or feedback.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to monitor activity on our Service and store certain information.

3. How We Collect Information

We collect information through various methods, including:

• Direct interactions when you create an account, use our Service, or contact us.
• Automated technologies or interactions, such as usage data collection when you use our Service.
• Third parties or publicly available sources, such as data from your cloud provider accounts.

4. How We Use Your Information

We use the information we collect for various purposes, including:

• To provide, maintain, and improve our Service.
• To process and complete transactions, and send related information including confirmations and invoices.
• To generate and provide cloud optimization recommendations.
• To monitor and analyze usage patterns and trends to improve the user experience.
• To notify you about changes to our Service, terms, or policies.
• To provide customer support and respond to inquiries.
• To send technical notices, updates, security alerts, and support and administrative messages.
• To communicate with you about products, services, offers, promotions, and events, and provide news and information we think will be of interest to you.
• To monitor and prevent fraud, unauthorized access, and other potential security issues.
• To carry out our obligations and enforce our rights arising from any contracts with you.
• To comply with legal obligations and respond to lawful requests from public authorities.

5. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest using industry-standard protocols.
• Regular security assessments and penetration testing.
• Access controls and authentication mechanisms to prevent unauthorized access.
• Regular backups and disaster recovery procedures.
• Employee training on data protection and security best practices.
• Incident response plans to address potential data breaches.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide the Service to you.
• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them).
• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

7. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf, such as cloud hosting, data analytics, payment processing, and customer service.
• Business Partners: Companies we partner with to offer integrated or co-branded services.
• Affiliates: Companies that are under common control with us.
• Professional Advisors: Lawyers, auditors, and insurers where necessary in the course of the professional services they provide to us.
• Authorities and Others: Law enforcement, government officials, or other third parties when compelled by legal process or required by law.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

We do not sell or rent your personal information to third parties for their marketing purposes.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access and receive a copy of your personal information.
• The right to rectify or update your personal information.
• The right to delete your personal information.
• The right to restrict or object to our processing of your personal information.
• The right to data portability.
• The right to withdraw consent at any time for processing based on consent.
• The right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

9. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there.

10. Compliance with Regulations

We comply with applicable data protection laws and regulations, including:

• General Data Protection Regulation (GDPR): For users in the European Union, we adhere to GDPR requirements and provide mechanisms for data subject rights.
• California Consumer Privacy Act (CCPA): For California residents, we provide additional rights and disclosures as required by the CCPA.
• Health Insurance Portability and Accountability Act (HIPAA): If applicable, we maintain HIPAA compliance for any protected health information processed through our Service.

11. Children's Privacy

Our Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "September 2024" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions or concerns about our Privacy Policy or data practices, please contact us at:

• Email: privacy@intu.cloud