Last updated October 5, 2026. This policy explains how CloudFran handles personal information.
This Privacy Policy applies to personal information CloudFran, LLC (“CloudFran,” “we”) collects through our platform, websites, and services (the “Services”). Where CloudFran processes information on behalf of a business customer (for example that business’s own customer records), we act as that customer’s service provider and process the data under their instructions and agreement.
We use personal information to provide, operate, secure, and improve the Services; to deliver what you request (such as a resource, trial, or account); to communicate with you, including service messages and, with your consent, marketing; to process payments; to detect and prevent fraud and abuse; to produce aggregated or de-identified insights; and to comply with law.
We share personal information with service providers acting on our behalf; with a business customer when you interacted with their services or requested a cobranded resource; in connection with a corporate transaction (such as a merger or sale); and where required by law or to protect rights and safety. CloudFran does not sell your personal information, and does not share it for cross-context behavioral advertising or targeted advertising, as those terms are defined under U.S. state privacy laws. External disclosures are limited to information that has been de-identified or aggregated. If you provide a mobile number and opt in, SMS is used only for the purposes you requested; CloudFran does not share mobile information or SMS-consent data with third parties or affiliates for their marketing. For full detail and to manage your choices, see your account Privacy Controls.
We use cookies and similar technologies to keep you signed in, remember preferences, secure the Services, and measure performance. You can control cookies through your browser; some features may not work without them.
We keep personal information for as long as needed to provide the Services, meet legal and accounting obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.
Where we process data on behalf of a business customer, please direct such requests to that business; we will assist them as their service provider.
We use administrative, technical, and organizational measures designed to protect personal information, including access controls and encryption in appropriate circumstances. No method of transmission or storage is completely secure, but we work to protect your information.
The Services are for businesses and are not directed to children. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction).
CloudFran operates in the United States and may process information there and in other countries. Where required, we use appropriate safeguards for cross-border transfers.
CloudFran may process de-identified, aggregated, or statistically transformed data — including transaction histories, operational metrics, and user prompts — to operate and optimize the platform, generate business intelligence and benchmarks, produce geographic forecasting, and train internal artificial-intelligence and machine-learning models. Direct identifiers are removed before such processing. CloudFran maintains commercially reasonable technical safeguards to prevent re-identification, commits not to attempt to re-identify the information (except to validate its de-identification processes), and contractually prohibits downstream recipients from attempting to re-identify individuals. You may opt out of external de-identified-data sharing via your account Privacy Controls.
Residents of California, Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws (for example CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA) have specific rights, including to access, correct, delete, and port their personal information and to opt out of its sale or sharing for cross-context behavioral or targeted advertising. CloudFran guarantees: (1) No sale or sharing — we do not sell your personal information or share it for cross-context behavioral advertising; (2) Sensitive-data limitation — we do not process sensitive personal information to infer characteristics about you; (3) De-identified commitment — where we process de-identified or aggregated data, we keep it de-identified and do not re-identify it except to validate de-identification.
Controller vs. service provider. When CloudFran processes information to provide its own software services, CloudFran is the controller. When you interact with a franchise, restaurant, or other merchant using the CloudFran platform, that business is the controller and CloudFran acts strictly as its service provider/processor; requests about merchant-controlled data should be directed to that business. To exercise your rights or opt out of specific programs, use the toggles in your account Privacy Controls or email legal@cloudfran.com.
We may update this Privacy Policy; material changes will be communicated by reasonable means. The “last updated” date above reflects the current version.
Questions or privacy requests? Contact CloudFran at legal@cloudfran.com.
This Privacy Policy works together with the CloudFran Terms of Service. For the handling of personal information, this Privacy Policy governs.