Cloudratics Pvt Ltd, based in Karachi, Pakistan, operates under the name Cloudratics. In this policy, “Cloudratics,” “we,” “us,” and “our” refer to that business. Contact us at info@cloudratics.com about this policy or your personal information.
This policy explains how we handle personal information through www.cloudratics.com, business inquiries, demonstrations, recruitment, support, and related services. It also explains our role when customers use products such as SAMS, Nexone ERP, Ordez, or custom software. Product-specific notices and customer agreements may provide additional details.
1. Our role in handling information
We determine how information is used for our own website, sales, recruitment, billing, and business administration. Where applicable law uses these terms, we act as the controller for those activities.
When a school, employer, merchant, or other customer uses our software to manage its own records, that customer generally determines the purposes of processing and we act as its processor or service provider under the applicable agreement. Contact that organization first about its records. We assist it with requests as required by our contract and applicable law.
2. Information we collect
Information you provide may include your name, email address, phone number, organization, job role, inquiry details, project requirements, booking details, support messages, attachments, and recruitment materials. If you use a chatbot or AI feature, this may include your messages and files. Please avoid sending passwords, full payment card details, or sensitive records through general inquiry channels.
When you interact with our website or services, we may receive IP addresses, browser and device information, access times, pages requested, referring pages, and technical or security logs. Optional tracking depends on the technologies enabled and your choices. Billing records may include business details, transaction references, and payment status; collection of card information depends on the payment method and provider.
Customer-managed systems may contain student, parent, employee, supplier, financial, inventory, ordering, or other operational records, depending on the enabled product. Biometric, health, or other sensitive information requires a separate assessment and appropriate product notice; this general policy does not authorize its collection.
Information may also come from your organization, authorized colleagues, recruitment sources, payment providers, and other service providers where relevant and lawful.
3. Why we use information
We use relevant information to answer inquiries; arrange consultations and demos; prepare proposals; administer accounts and contracts; deliver and support services; process billing; assess job applications; maintain security; investigate misuse; improve services; and meet legal obligations. Where permitted, we may send relevant business updates, with consent where required and an option to unsubscribe.
Providing information is generally voluntary. However, we may be unable to answer a request, deliver a service, process an application, or meet contractual or legal requirements without the information needed for that activity.
4. Legal grounds where required
Where applicable law requires a legal basis, we rely on steps requested before entering a contract and performance of a contract for service delivery; legitimate interests for proportionate business administration, security, and service improvement where those interests are not overridden by individual rights; legal obligations for required records and disclosures; and consent where required for marketing or optional technologies. Consent may be withdrawn without affecting earlier lawful processing.
Sensitive information requires an additional applicable legal condition. If a feature makes solely automated decisions with legal or similarly significant effects, a separate notice must describe its logic, consequences, and applicable rights before it is used.
5. Cookies and similar technologies
Cookies and similar technologies can support essential site functions, security, preferences, analytics, or marketing. Where consent is required, optional technologies should operate only after your affirmative choice. You can manage browser settings and any cookie controls provided; disabling essential storage may affect functionality.
The technologies enabled may vary by service. Contact info@cloudratics.com for details about cookies and storage relevant to the website or product you use. Where optional technologies are enabled, the applicable cookie notice or consent interface should identify their provider, purpose, duration, and available controls.
6. Sharing and service providers
We share information with authorized personnel and providers where needed for hosting, databases, communications, support, security, analytics, recruitment, AI functionality, or payment processing. Providers receive information relevant to their role and are subject to appropriate contractual protections where required. Contact info@cloudratics.com for information about providers relevant to your service.
We may disclose information where legally required, to protect lawful rights or safety, or in connection with a business transfer subject to appropriate safeguards. Third-party services such as WhatsApp and payment platforms also process information under their own policies. We do not sell personal information, share it for cross-context behavioral advertising, or disclose it to third parties for their independent marketing purposes. Necessary processing by authorized providers and lawful disclosures are limited to the purposes described in this policy.
7. AI features and chatbot information
Cloudratics provides its own chatbot. Messages and any attachments supplied to it are processed to respond to your questions and, where relevant, handle your inquiry. Ownership of the chatbot does not by itself mean that all underlying model processing or hosting takes place within Cloudratics. Any providers involved in delivering the feature fall under the service-provider provisions above. Avoid submitting passwords, payment card details, or sensitive personal records. Contact info@cloudratics.com to ask about storage, deletion, provider involvement, or use of chatbot information before submitting confidential material.
8. International processing
Cloudratics operates from Pakistan. Depending on the service and its hosting arrangements, information may also be processed in other countries by authorized providers. Privacy laws may differ between countries. Contact info@cloudratics.com for the processing locations and transfer arrangements relevant to your service. Where transfer restrictions apply, the required safeguards must be established before that transfer, and information about those safeguards is available on request.
9. Retention and security
We retain information according to its purpose, the service relationship, applicable recordkeeping obligations, dispute needs, and security requirements. Customer-controlled data is retained and returned or deleted under the applicable agreement. Backups may persist until their scheduled expiry and are restricted from ordinary use.
Retention is determined by purpose rather than a single fixed period. Inquiry records are kept while the request and any resulting engagement remain active, and as needed for related follow-up or disputes. Recruitment records are kept for the recruitment process and any separately authorized future consideration. Billing records are kept for applicable accounting and tax requirements. Support and security records are retained according to investigation, troubleshooting, and security needs. Customer records and backups follow the applicable service agreement and deletion arrangements. Information should be deleted or anonymized when its purpose and any required retention end. Contact us for the criteria applicable to your record.
We use technical and organizational safeguards appropriate to the information and risks involved. No system can guarantee absolute security. Security incidents are assessed and notifications are made to affected customers, individuals, or authorities where required by applicable law or contract.
10. Your choices and rights
Depending on the law that applies and the circumstances, you may request access, correction, deletion, restriction, portability, or an objection to certain processing. You may withdraw consent and unsubscribe from marketing. In particular, you may object to direct marketing at any time. These rights are subject to applicable conditions and exceptions.
Send requests to info@cloudratics.com. We may verify your identity proportionately and respond within the applicable legal period. Where your organization controls the records, we may refer the request to it and assist as appropriate. You may also complain to the competent privacy regulator; for UK matters where UK data protection law applies, this includes the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.
11. Children and institutional records
Our business website and sales channels are intended for business users. Products used by schools or other institutions may process children’s information on the institution’s instructions. The institution must establish an appropriate legal basis and provide required notices and permissions. If you believe a child has supplied information improperly through our website, contact us so we can investigate.
12. Changes and contact
We update this policy when our practices or requirements change and revise the effective date. Material changes will be communicated where required. A policy update does not itself authorize a new use of information that requires consent or another legal basis.
Privacy contact: Cloudratics, Cloudratics Pvt Ltd, Karachi, Pakistan. Email: info@cloudratics.com. Phone: +92 337 1248637. Website: https://www.cloudratics.com.