Privacy Policy - Cloud Business Partner

Welcome to Cloud Business Partner ("Platform", "App", "we", "us", or "our"), operated under the registered domain cloudbusinesspartner.com. We operate a high-trust, verified marketplace and deal room platform for 50/50 co-founders, startup investors, factory turnarounds, and asset exchanges.

We take your personal and business data privacy with the highest degree of responsibility. This Privacy Policy details our data collection, usage, storage, security practices, and your statutory rights to access or request the complete deletion of your data under the Google Play Developer Policies and the Digital Personal Data Protection (DPDP) Act, 2023.

1. Information We Collect

To deliver verified matchmaking, secure deal rooms, and marketplace functionality, we collect the following categories of user data:

Personal Identity Information: Full Name, Email Address, Phone Number, and Profile Photograph.
Founder & Professional Profile: Job Title, Industry Skills, Founder Bio, and Business Role (Active Co-Founder, Silent Partner, Turnaround Specialist).
Voluntary KYC & Business Verification: Permanent Account Number (PAN), masked Aadhaar number (last 4 digits only; full 12-digit Aadhaar and biometric data are never requested or stored), Corporate Identity Number (CIN), GSTIN, and MSME/Udyam certificates.
Marketplace Pitch & Deal Listings: Startup pitch information, financial metrics (revenue, EBITDA, runway), valuation asks, equity percentages, and business model canvas data.
Deal Room Communications: Encrypted text messages and voice audio recordings exchanged voluntarily inside private deal rooms between prospective partners.
Financial & Subscription Data: In-app membership tier status (Free, Pro, Ultra), order IDs, and payment reference numbers. Payment card credentials and UPI PINs are processed directly by our RBI-authorized, PCI-DSS Level 1 compliant payment gateway (Razorpay); we do not store your card numbers or CVV.
Technical & Device Identifiers: Device model, operating system version, unique application installation ID, IP address, and Google Firebase Cloud Messaging (FCM) push notification tokens.

2. Information We Explicitly Do NOT Collect

To respect your privacy boundaries and comply with Google Play's strict User Data guidelines, Cloud Business Partner DOES NOT collect:

Continuous background GPS location tracking.
Personal device Contacts list / Address book.
SMS inbox messages or Personal Call Logs.
Full 12-digit Aadhaar numbers or Biometric records.
Unauthorized background audio recordings or eavesdropping.

3. Mobile Device Permissions Requested & Justification

Our Android app requests the following system permissions exclusively to perform user-initiated actions:

Camera (android.permission.CAMERA): Used only when you choose to photograph identity documents for voluntary founder KYC verification or capture photos of physical business assets/machinery.
Photos & Media Storage (android.permission.READ_MEDIA_IMAGES / Storage): Required to upload pitch deck PDF documents, business images, and company logos from your device gallery.
Microphone (android.permission.RECORD_AUDIO): Used exclusively when you tap and hold the in-app microphone button to record audio voice notes inside deal rooms. No recording occurs in the background.
Push Notifications (android.permission.POST_NOTIFICATIONS): Used on Android 13+ to deliver critical real-time alerts regarding deal proposals, partner match notifications, and counter-bids. Users can enable or disable notifications at any time via device settings.
Internet Access (android.permission.INTERNET): Required to communicate securely with our cloud servers and synchronize real-time marketplace data.

4. How We Use Your Information

Founder Matchmaking: Algorithms calculate skill compatibility and industry alignment to connect founders with verified investors and turnaround specialists.
Encrypted Deal Rooms: Facilitating secure messaging, mutual digital Non-Disclosure Agreements (NDAs), and audio note exchange.
Trust & Anti-Fraud Protection: Verifying founder identity badges to maintain a community free of spam, scams, and fraudulent listings.
Push Notifications: Delivering timely updates about pitch inquiries, chat responses, and turnaround bids.

5. Third-Party Service Providers (Data Processors)

We do not sell, rent, or trade your personal data. We share data solely with enterprise-grade cloud service providers governed by strict confidentiality agreements:

Supabase Inc. (PostgreSQL & Authentication): Encrypted database hosting, user authentication, and Postgres Row-Level Security (RLS).
Cloudflare R2: Stores uploaded pitch documents, asset photos, and encrypted audio notes with HTTPS TLS 1.3 delivery.
Razorpay Software Private Limited: Processes payments for Pro and Ultra memberships. All transactions adhere to PCI-DSS Level 1 compliance and RBI regulations.
Google Firebase Cloud Messaging (FCM) & Google Play Services: Manages reliable push notifications and app performance diagnostics.

6. Children's Privacy (Google Play Families Policy & COPPA Compliance)

Strict Age Restriction (18+): Cloud Business Partner is an enterprise business platform intended exclusively for adult entrepreneurs, founders, and investors aged 18 years or older.

We do not knowingly solicit, collect, or process personal data from individuals under the age of 18 (or under 13 in relevant jurisdictions). If we discover that personal data of a minor has been submitted, we take immediate steps to permanently delete the account and associated records from our servers. If a parent or guardian becomes aware that a child has provided us with personal information, please contact us at support@cloudbusinesspartner.com.

7. Account & Data Deletion (Google Play Mandate & DPDP Act)

Your Right to Erase Your Data: You have the absolute right to request the complete deletion of your account and all associated personal data at any time.

How to Request Account & Data Deletion:

In-App Deletion: Open the app → go to Profile → Settings → Delete Account. Follow the confirmation prompt to immediately trigger account deactivation.
Web-Based Deletion Request (Without App): If you have uninstalled the app, visit our dedicated Web Deletion Page at https://cloudbusinesspartner.com/delete-account.html to submit an online deletion request.
Email Deletion Request: Send an email from your registered address to support@cloudbusinesspartner.com or abhi030385@gmail.com with the subject "Account Deletion Request".

Data Purged vs. Data Retained:

Data Permanently Purged: Within 30 days of verified deletion request, your profile, authentication records, KYC verification documents, uploaded pitch decks, deal room chat logs, and voice notes are completely erased from Supabase and Cloudflare R2.
Data Retained for Legal Compliance: In compliance with Indian taxation laws (Goods and Services Tax Act) and accounting regulations, historical financial invoices and transaction reference numbers for paid subscription memberships are retained for the mandatory statutory period.

8. Data Security & Storage Architecture

We maintain comprehensive administrative, technical, and physical safeguards:

Encryption in Transit: All communications between the mobile application and cloud backend are encrypted using Transport Layer Security (TLS 1.3 / SSL 256-bit encryption).
Encryption at Rest: Cloud database storage and object repositories are encrypted at rest using AES-256 standard encryption.
Row-Level Security (RLS): Database architecture enforces strict isolation ensuring that private pitch documents and secret room discussions are accessible solely by authorized counterparties.

9. Grievance Officer & Statutory Contact Details (India DPDP Act 2023 & IT Rules)

In accordance with the Information Technology Act, 2000, the IT Rules 2021, and the Digital Personal Data Protection Act, 2023, the contact details of the designated Grievance Officer are provided below:

Designated Grievance Officer: Abhishek Kumar

Designation: Data Protection & Grievance Officer

Platform: Cloud Business Partner (cloudbusinesspartner.com)

Application Package: com.cloudbusinesspartner.app

Official Email: support@cloudbusinesspartner.com / abhi030385@gmail.com

Country / Jurisdiction: India

Response Timelines: Inquiries and grievance tickets are acknowledged within 24 hours and addressed within 15 business days.