1. Introduction

CloudwowX is committed to protecting privacy and handling personal information responsibly. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you:

• visit our websites (including https://terms.cloudwowx.com and any CloudwowX-branded domains);
• create an account, subscribe to, or use our software, dashboards, APIs, demos, trials, and related services (the "Services");
• communicate with us (including via email); or
• otherwise interact with CloudwowX.

This Policy is designed to align with the Protection of Personal Information Act, 4 of 2013 ("POPIA") and, where applicable, the EU/UK General Data Protection Regulation ("GDPR"), and other applicable privacy laws.

2. Who We Are (Responsible Party / Controller)

For most website/admin/account data, CloudwowX is the Responsible Party/Controller.

3. Scope

This Privacy Policy applies to:

• visitors to our websites;
• prospective clients;
• clients and authorised users of our Services;
• suppliers/partners (where relevant);
• individuals whose personal information is processed through client use of our Services ("End Contacts"), to the extent CloudwowX processes that information as an Operator/Processor.

4. Definitions

• "Personal Information" has the meaning in POPIA (and includes "personal data" under GDPR).
• "Client Data" means information uploaded, stored, sent, received, or otherwise processed by a Client through the Services, including End Contact information, communications, and content.
• "End Contacts" means the Client's customers, leads, subscribers, and other contacts whose information the Client processes using the Services.
• "Sub-processor" means a third party that processes personal information on CloudwowX's behalf (e.g., hosting, communications APIs, analytics, payment processing).

5. Information We Collect

We may collect the following categories of information:

6. Roles: Client as Controller / CloudwowX as Processor

7. How We Use Information (Purposes)

We may use personal information to:

8. Lawful Bases for Processing (POPIA / GDPR)

Where applicable, we rely on one or more of the following:

• Contract: processing necessary to provide Services you request.
• Legitimate interests: running our business, securing Services, preventing fraud, improving products (balanced against your rights).
• Consent: where required (e.g., certain marketing; certain cookies).
• Legal obligation: compliance with applicable laws and regulations.
• Vital interests/public task: only in rare circumstances where applicable.

For Client Data processed as a Processor/Operator, the Client is responsible for establishing the lawful basis; CloudwowX processes on the Client's instructions.

9. How We Share Information

We may share personal information in the following circumstances:

10. International / Cross-Border Transfers

CloudwowX may process or store information in South Africa and/or other countries where we or our sub-processors operate. When transferring personal information cross-border, we take reasonable steps to ensure appropriate safeguards consistent with applicable law (e.g., contractual protections, security measures, and where applicable, approved transfer mechanisms).

Clients are responsible for ensuring their own cross-border compliance for End Contact data and for choosing appropriate configurations and providers.

11. Security Measures

We use commercially reasonable administrative, technical, and physical safeguards, which may include:

• access controls and least-privilege policies;
• encryption in transit (and where appropriate, at rest);
• monitoring and logging;
• backups and disaster recovery practices;
• vulnerability management and patching;
• segregation of environments where applicable.

No system is 100% secure. You are responsible for safeguarding your account credentials and using strong passwords and appropriate access controls.

12. Cookies & Tracking Technologies (Website)

We may use cookies and similar technologies to:

• keep you logged in (where applicable);
• remember preferences;
• measure site performance and usage;
• improve content and user experience;
• support security and fraud prevention.

You can control cookies through your browser settings. Some cookies are essential for the website to function.

If you use third-party analytics tools, they may set their own cookies subject to their privacy policies.

13. Marketing Communications

14. Data Retention

We retain personal information only as long as reasonably necessary for:

• providing Services and maintaining accounts;
• compliance with legal obligations;
• resolving disputes;
• enforcing agreements; and
• security and operational purposes.

Client Data retention depends on the subscription status and configuration. After termination, Client Data may be deleted within a reasonable period (e.g., up to 90 days) unless legally required to retain it, or unless longer retention is needed for backups/disaster recovery archives (which are not typically accessible to clients). Specific retention may vary by product/module and your plan.

15. Your Rights (POPIA / GDPR)

Depending on your jurisdiction and relationship to CloudwowX, you may have rights such as:

• access to your personal information;
• correction/update of inaccurate information;
• deletion/erasure (subject to legal and contractual limits);
• objection to certain processing (including direct marketing);
• restriction of processing (where applicable);
• data portability (GDPR where applicable);
• withdrawal of consent (where processing is based on consent);
• lodging a complaint with a regulator.

How to exercise rights: Email support@cloudwowx.com with "Privacy Request" in the subject line. We may request verification to protect your information.

16. Client Data, Consent Records, and Opt-Outs

Clients should maintain consent/opt-in records and honor opt-out requests. Where CloudwowX provides opt-out features, Clients must configure and use them appropriately. CloudwowX is not responsible for Client failures to obtain consent or to comply with marketing laws or platform rules.

17. Third-Party Links and Services

Our websites or Services may link to third-party sites or integrate with third-party platforms. CloudwowX is not responsible for third-party privacy practices. Review third-party policies before using them.

18. Children

Our Services are intended for business use and not directed to children. Do not knowingly submit children's personal information unless you have a lawful basis and all required consents.

19. Changes to This Privacy Policy

We may update this Policy from time to time. We will post the updated version on our website (and/or notify Clients via email or dashboard notice). Continued use of the Services after an update becomes effective constitutes acceptance.

20. Contact Us

Privacy questions and requests:

21. Complaints (South Africa)

If you believe we have not handled your personal information appropriately, you may contact us first so we can try to resolve it. You may also lodge a complaint with the Information Regulator (South Africa) in accordance with POPIA.