Privacy Policy

Last updated: April 10, 2026

1. Who we are

Cloudine is operated by Laburan Inc. (“LLL”, “we”, “us”), a company incorporated in Malaysia. Contact: privacy@cloudine.tech

2. What data we collect

• Account data: email address, name, hashed password (managed by Supabase Auth)
• AWS metadata: resource names, IDs, regions, configuration metadata — no AWS data payloads (S3 objects, EC2 disk content, etc.)
• Cost data: aggregated cost figures from AWS Cost Explorer
• Usage logs: cron run results, audit trail of write actions (pipeline approvals)
• Browser push subscriptions: per-device VAPID endpoint + keys, stored until the user removes the device

3. How we use data

We use the data exclusively to provide the Cloudine service: displaying your AWS state, sending notifications, generating reports, and powering AI summaries.

We do not sell data to third parties. We do not use data for advertising.

4. Data residency

Data is stored in Supabase (Singapore region, ap-southeast-1) and processed in Vercel edge functions. AI summaries are generated via the Anthropic API (US).

5. Retention

• Cost records: 90 days (free tier)
• Alert history: 90 days
• Audit log: 1 year
• AI summaries: 90 days
• Account data: until account deletion

6. Your rights (PDPA / APPI)

Residents of Malaysia have rights under the Personal Data Protection Act 2010 (PDPA). Japanese residents have rights under the Act on the Protection of Personal Information (APPI). You may request access, correction, or deletion of your data by emailing privacy@cloudine.tech.

7. Data Processing Agreement

Enterprise customers who require a formal DPA should contact privacy@cloudine.tech.

8. Sub-processors

See our sub-processors list.

9. Contact

Data Protection Officer: Laburan Inc., privacy@cloudine.tech