CLOUD-VISION LLC · VERSION 2026-10-08

Privacy Policy

Effective 8 October 2026. Cloud-Vision LLC operates Vision Preview. This notice explains how information is handled when you visit, register, submit email tests or review shared proofs. Contact info@cloud-vision.com with privacy questions or requests.

1. Our role and your organisation's role

We determine how to process account, billing, security and service-administration information. Your organisation generally determines the purpose and lawful basis of personal data in the emails and comments it submits; we process that content to provide the requested testing service. Organisation admins manage members and access. If you use an employer's organisation, direct requests about its content to that organisation as well as contacting us. If your processing requires a data-processing agreement or particular international-transfer safeguards, contact us before submitting that data; this notice is not a substitute for a signed agreement.

2. Information we handle

• Accounts and access: name, email, password hash, verification information, memberships, roles, invitations, session/security metadata and your recorded acceptance time and policy version.
• Email tests and editing: submitted HTML, MIME content, headers, sender and recipient information, subject, attachments and linked resources where present; drafts, chosen clients, screenshots, check findings and job timestamps.
• Collaboration: names, comments, mentions, public-link tokens, version approvals and associated times. A guest's entered name is not verified.
• Billing and usage: organisation contact, plan, render usage, subscription identifiers, status, period dates, invoice-related records, support requests and administrative changes. Stripe processes payment information; our application is not intended to store full card numbers or security codes.
• Technical information: request and error logs, IP/network information, device/browser details provided by requests, delivery and capture timing, and anti-abuse information needed to operate and secure the service.

3. Why we use it

We use information to authenticate users; receive and render tests; store and display results; run requested checks; deliver mentions, verification, billing and service notices; enforce shared limits; support customers; investigate failures and abuse; maintain security; and meet accounting or legal obligations. Where applicable, these purposes rely on performance of our contract, legitimate interests in operating a safe service, compliance with law, or consent for activities that require it. Legitimate interests are subject to applicable rights and balancing requirements.

We do not sell test content or use it for targeted advertising. Registration acknowledgement of this policy is not consent to unrelated marketing. You may opt out of marketing communications where offered; essential account, payment and security notices may still be necessary to provide the service.

4. Rendering, external resources and service providers

Providing real-client previews means delivering or opening test content in supported mail environments, including Google/Gmail, Microsoft/Outlook and Apple Mail, on our rendering infrastructure. Providers supporting operation include Heroku and Microsoft Azure for infrastructure, Cloudflare for inbound routing, Bunny for image storage/delivery, Stripe for billing, and configured email delivery providers such as SendGrid. Provider involvement varies with the feature and client selected. Authorised staff and contractors may access relevant information for support, maintenance or security.

Rendering emails, loading remote images, or checking public links and sender DNS records can contact servers operated by you or third parties. Those servers can observe requests, including their timing and network address, and may contain tracking mechanisms. Builder images are initially blocked until enabled, but that protection is not a promise that native email clients never load remote content. Do not submit single-use action links or tracking-sensitive content unless you accept the effects of testing.

We may disclose information when lawfully required, to protect rights and safety, or in connection with a business transfer with appropriate protections and notice where required. We do not claim that all providers or data remain in a single country. Data may be processed in the United States and other countries used by our providers and operations. Where applicable law requires specific transfer safeguards, those safeguards must be arranged for the relevant processing.

5. Public links, screenshots and comments

Creating a public review link allows anyone who obtains it to access the shared preview, checks, names, comments and approval information available on that page without signing in. Mentions notify organisation members by email and include the comment and preview link. Public reviewers may see member display names for tagging, not their private email addresses through that selector. Shared comments are not private team notes.

CDN image URLs may be accessible without login. Removing a hosted page does not recall emailed, downloaded, cached or forwarded copies and may not invalidate direct image URLs. Ask support about content removal from hosted storage. Share only material appropriate for these access characteristics.

6. Storage and retention

Retention depends on purpose and location. The application's source cache for adding clients is limited to up to 30 days and the organisation's storage allowance, so source can be evicted earlier. Expiry there is not a promise that every copy has simultaneously disappeared from rendering mailboxes, devices, provider logs or backups. Sender-check temporary material has separate cleanup rules. Saved screenshots, drafts, comments and approvals may remain available after the source cache expires.

We retain account, operational, usage, consent and billing records as needed to provide the service, handle disputes, prevent abuse and comply with legal obligations. Deleting a test does not automatically erase its render-accounting entry. Subscription cancellation or downgrade to Free does not itself delete your account or content. Contact us for account or content deletion; we will identify information that must be retained and applicable exceptions. Backup and provider-held copies may require additional deletion time. Keep your own copies of essential work; Vision Preview is not an archive.

7. Security and your responsibilities

We use access controls, authentication, password hashing and other technical safeguards, but no online service can guarantee absolute security. Keep credentials and bearer tokens private, restrict organisation membership, rotate compromised folder tokens and report suspected incidents promptly. Do not submit sensitive personal information, live secrets or regulated data without an expressly agreed arrangement. We will respond to incidents and provide notices required by applicable law; the limitation provisions in our Terms do not remove mandatory privacy duties.

8. Browser storage

The application uses browser storage for session tokens, selected organisation, preferences and interface state. Infrastructure and payment providers may use cookies or similar technologies for security and their services. Blocking essential storage can prevent sign-in or break functionality. This policy does not treat continued browsing as consent to non-essential tracking; if additional tracking requires consent, it must be disclosed and controlled separately.

9. Your choices and rights

Depending on where you live and which law applies, you may request access, correction, deletion, portability or a copy of your information; restrict or object to certain processing; withdraw consent where processing relies on it; or appeal a denied request. Withdrawing consent does not undo processing already lawfully performed. We may verify identity and authority in a proportionate way before acting. Do not send passwords or payment-card details with your request. Rights may be subject to legal exceptions, including obligations to retain billing records or protect another person's information.

Email info@cloud-vision.com with the subject “Vision Preview privacy request” and identify the relevant account or organisation. We will handle requests within applicable legal time limits and explain any permitted refusal. You may also complain to your competent privacy or consumer-protection regulator. We will not unlawfully discriminate against you for exercising your rights.

10. Children and policy changes

The service is not directed at children under 18. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. We may update this policy to reflect changes in processing or law, publish an updated effective date and provide additional notice or obtain consent where required for material changes. Archived versions remain linked to recorded registration acceptance.

11. Contact