Privacy Policy

Effective Date: October 10, 2026

CloudDrac s.r.o. (“we”, “us”, or “our”) operates the website clouddrac.net. This Privacy Policy describes how we collect, use, and protect your personal information.

Information We Collect

When you contact us via email, phone, or through our website, we may collect:

  • Your name
  • Email address
  • Phone number
  • Company name
  • Any other information you choose to provide in your message

How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and provide requested services
  • Communicate with you about our services
  • Improve our website and services
  • Comply with legal obligations

We process your personal data based on one or more of the following legal bases:

  • Consent — When you voluntarily contact us or submit your information
  • Legitimate interest — To improve our services and respond to inquiries
  • Contractual necessity — To fulfill our obligations under a service agreement
  • Legal obligation — To comply with applicable laws and regulations

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Contact and communication records are retained for the duration of our business relationship and up to 5 years thereafter.

Your Rights

Under the GDPR and applicable Slovak law, you have the right to:

  • Access your personal data
  • Rectify inaccurate personal data
  • Erase your personal data (“right to be forgotten”)
  • Restrict the processing of your personal data
  • Data portability — receive your data in a structured, machine-readable format
  • Object to processing based on legitimate interest
  • Withdraw consent at any time

To exercise any of these rights, contact us at office@clouddrac.net.

Third-Party Services

We do not sell, trade, or otherwise transfer your personal information to third parties. We may use third-party services (such as hosting and analytics providers) that process data on our behalf, subject to appropriate data processing agreements.

WhatsApp Business Automation Service

In addition to our website, CloudDrac s.r.o. provides a WhatsApp messaging automation service for business customers: automated replies to inbound customer messages and daily activity digests delivered by email (the “Service”). The Service operates on the WhatsApp Business Platform provided by Meta Platforms Ireland Ltd.

When a business connects its WhatsApp Business number to the Service, we process the following data on that business’s behalf:

  • Inbound WhatsApp messages sent to the connected business number (message text or media type, sender phone number, sender profile name, timestamps)
  • Technical identifiers provided by Meta (WhatsApp Business Account ID, phone number ID, message IDs)
  • Account and configuration information of the business customer (company name, contact email, service settings)

We act as a data processor for our business customers in respect of their WhatsApp communications. We do not process group chat messages, and we do not use message data for advertising, profiling, or marketing.

AI-assisted summaries. Daily digests may be generated with the help of large language models hosted on Amazon Bedrock (AWS). Message content is submitted solely to produce the summary, is not retained by us for any other purpose, and is not used to train models. Business customers can disable AI summaries.

Storage and retention. Service data is processed and stored on Amazon Web Services infrastructure in the European Union (Frankfurt, eu-central-1), encrypted in transit and at rest. Message content is retained for up to 48 hours after the daily digest is produced and is then deleted automatically; aggregate metadata (message counts, timestamps) may be retained longer for service statistics.

Sub-processors. The Service relies on the following processors, each bound by their respective data processing terms: Meta Platforms (WhatsApp Business Platform), Amazon Web Services (hosting, email delivery, Amazon Bedrock). We do not sell or otherwise disclose Service data to any other third parties, except where required by law.

Data subject rights. The rights described in the “Your Rights” section of this policy apply equally to data processed through the Service. Business customers may additionally request deletion of all their Service data upon termination. Requests: office@clouddrac.net.

Cookies

This website does not use cookies.

Contact

If you have any questions about this Privacy Policy or our data practices, please contact us:

CloudDrac s.r.o. Karpatské námestie 7770/10A, 831 06 Bratislava - mestská časť Rača, Slovenská republika IČO: 56944365 DIČ: 2122513074 IČ DPH: SK2122513074 Email: office@clouddrac.net Phone: +421 904 489 872