Privacy policy

• Service delivery: Provision, operate, maintain, and improve cloud infrastructure services; process transactions and send service-related notifications.
• Security & compliance: Detect and prevent fraud, unauthorized access, abuse, and violations of the acceptable use policy in our Terms and Conditions; comply with applicable laws and regulations.
• Billing & accounting: Generate invoices, process payments, calculate partner commissions, manage credits, and maintain financial and tax records.
• Sales and support: answer your enquiries, prepare quotes and estimates, and follow up. We use AI (Claude, by Anthropic) to help write follow-up emails, summarise enquiries and replies, and answer questions in the website chat.
• Communications: Send product updates, maintenance notices, security alerts, and (with consent) marketing emails. Every marketing email has an unsubscribe link.
• Analytics & improvement: Analyse usage trends to optimize platform performance, plan capacity, improve product features, and develop new services.
• Legal obligations: Respond to legal processes, enforce our agreements, and protect Neon Cloud's rights and property.

We do not sell, rent, or trade your personal information. We share it only in these cases:

• Between Neon Cloud entities: Neon Cloud Private Limited and Neon Cloud LLC share customer and sales records with each other to serve you, under an intercompany agreement.
• Channel partners: If you are an end customer onboarded through a Neon Cloud channel partner or reseller, we may share relevant account and usage information with that partner to facilitate service delivery and support.
• Service providers: the companies below, which process data only on our instructions and under contracts that require appropriate security.
• Legal requirements: We may disclose information when required by law, regulation, court order, or governmental authority, or when necessary to protect our legal rights.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the protections described in this Policy.

Some of these providers store or process data outside India, including in the United States. None of them receives the contents of your cloud workloads.

Your cloud workloads and the data in them (virtual machines, volumes, object storage and the backups we run for you) are stored and processed in our data centre, colocated in a Tier III data centre facility in Delhi NCR (Noida), India. This is our only data centre region today. We do not move workload data out of India; it leaves India only if you move it yourself.

Account, billing, support, sales and website records are held by us and by the service providers listed in section 1.3, some of which are outside India.

We protect data with encryption in transit (TLS 1.2 or later) and at rest (AES-256), network segmentation, firewalls, intrusion detection, role-based access controls, and regular security reviews.

We keep personal information for as long as your account is active or as needed to provide services, comply with legal obligations (such as tax records), resolve disputes, and enforce agreements. After your account ends, workload data is deleted within ninety (90) days unless the law requires us to keep it longer. Website records follow our retention schedule: visitors' IP addresses are kept for 90 days, website analytics for about 13 months, website chats that didn't lead to an enquiry for 1 year, and job applications for 2 years. Enquiries are kept until you ask us to delete them.

Under India's Digital Personal Data Protection Act, 2023, you can ask for a summary of the personal data we hold about you and how we use it, ask us to correct, complete, update or erase it, withdraw consent you gave us (as easily as you gave it), raise a grievance with us, and nominate someone to exercise these rights for you. If you're not satisfied with how we handle a grievance, you can complain to the Data Protection Board of India. Depending on where you live, other laws may give you further rights.

To exercise these rights, use the Your data rights form or email privacy@neoncloud.com. We'll ask you to confirm your email address, then reply within thirty (30) days. Unsubscribe links in our emails withdraw marketing consent straight away.

Workload data stays in India (section 1.4). Other personal data may be processed outside India by the service providers in section 1.3 and, for customers whose contract is with Neon Cloud LLC, by our US entity. We transfer personal data out of India only as the Digital Personal Data Protection Act, 2023 allows, and not to any country the Government of India restricts. Where EU or UK law applies to a transfer, we use the safeguards it requires, such as Standard Contractual Clauses.

Our Services are not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal information, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our platform at least thirty (30) days before they take effect. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.

• Privacy requests: neoncloud.com/privacy/requests or privacy@neoncloud.com
• Grievance Officer: privacy@neoncloud.com
• Data Protection Officer: dpo@neoncloud.com
• India: Neon Cloud Private Limited, 901, 9th Floor, Tower B, Capital The Cityscape, Sector 66, Gurugram, Haryana 122101, India
• United States: Neon Cloud LLC, 8 The Green, STE R, Dover, DE 19901, United States