Legal

Privacy Policy

Last updated 18 September 2026

1Personal Information You Provide to Us

We do not collect or store private user information. No private information from use of the Deliverables resulting from our services is transmitted in any way to the Company or its affiliates.

Where we provide cloud-based servers for customer use, those servers are dedicated to the customer. Data entered or synced to such servers does not leave the server (except for backup and disaster recovery) and is not transmitted to the Company. Such servers are set up under the Company cloud infrastructure (typically AWS or Azure) and are accessible only by authorized Company personnel. Any access is governed by the policies of this document, and any transmission or use of such data for anything other than customer-sanctioned activity is strictly prohibited.

A Customer can create accounts for our Support Site (your “Account”) by providing a username, optional email address, and creating a password. This account information is used only for Support Site log-in and the sending of various reports, as requested by the user. Before being stored, account passwords are salted and hashed using high-grade SHA-256 ciphers.

We have no obligation to keep private Personal Information that a user makes available to other users or the public. Users should exercise caution when deciding to disclose Personal Information in public forums.

Information Obtained about Third Parties. If you provide us with information about others, or if others give us your information, we will only use the information for the specific purpose for which it was provided.

2Technical Information We Collect

The Company monitors any Customer machines instantiated within its cloud infrastructure which includes information such as logs, system performance, uptime, usage statistics, and other metadata.

When Deliverables are hosted, and upon your request, to understand how our Deliverables are being used and to make them better, we also automatically receive, store, and log certain types of technical information whenever you interact with them. This includes, for example:

  • Technical identifiers such as IP address, tokens, and cookies. These identifiers help us distinguish between unique browsers and devices, avoid showing the same information twice, keep you logged in, and improve your experience.
  • Device and access details, such as the domain and host from which you access the Internet; the IP address of the computer you use; browser software; operating system; and, if applicable, the Internet address of the website from which you linked directly to one of our website-type Deliverables.

You are always free to decline our cookies if your browser permits, but some parts of the hosted Deliverable or the Support Site may not work properly in that case.

How We Use Your Information

In addition to the specific uses above, technical information collected may be used to:

  • Respond to your requests and help us serve you better.
  • Fix technical problems and provide administrative services.
  • Generate documents on our platform.
  • Monitor traffic, visitor counts, and the effectiveness of the Deliverables.
  • Notify you of material changes to our Privacy Policy or Terms of Use.
  • Provide, administer, and facilitate your use of the Deliverables.
  • Resolve Deliverables issues and handle customer support questions.
  • Process or fulfill your requests and orders for services, information, or changes.
  • Enable user-to-user communication and solicit feedback to improve the user experience.
  • Manage your account preferences and maintain your profile and Account Information.
  • Monitor the technical functioning of the Deliverables.
  • Develop new or improved Deliverables, services, or offerings.
  • Create, review, analyze, and share aggregate information.
  • Identify, research, and protect against actual, potential, or threatened misuse, unauthorized use, or unwanted use of the Deliverables, including:
    • researching claims made by or about users and/or the Deliverables (which may include information from third-party sources),
    • analyzing trends and user traffic,
    • resolving disputes, and
    • troubleshooting errors or issues with the Deliverables.
  • Take actions we deem necessary to help ensure the safety and/or integrity of our users, employees, third parties, the public, and the Deliverables.

We may provide these services ourselves or share information with partners—provided they are certified and compliant under this policy—who perform services on our behalf. We may also use aggregated, de-identified technical data to market our Deliverables to others.

3B2B Software Services & Data Handling Policy

a) Scope & Role in Data Processing

Cailum.Blue provides custom software engineering and consulting services primarily performed directly within our clients’ IT environments and managed infrastructure.

Client Data & Systems:When performing services on client systems, Cailum.Blue acts strictly as a service provider (or data processor). We process, access, or interact with client data solely to fulfill contractual obligations set forth in our Master Services Agreements (MSAs) and Data Processing Addendums (DPAs), and in accordance with the client’s explicit instructions.

Prohibition of Data Migration:Our internal policy strictly prohibits our personnel from extracting, copying, downloading, or transferring client source code, credentials, or Client Personal Information into Cailum.Blue’s internal IT systems, business tools, or third-party storage environments unless explicitly authorized in writing by the client.

b) Fourth Parties & Sub-processors

Service Delivery:We do not engage fourth-party sub-processors to store, host, or process Client Personal Information on our behalf. All custom software engineering activity is contained within the client’s security boundary.

Corporate Infrastructure: Cailum.Blue utilizes enterprise cloud productivity tools (such as Google Workspace) strictly for internal operations, administrative communication, and general business management. These corporate systems are not utilized to store or process client datasets or personal information managed under client engagements.

c) Personnel & Subcontractors

All personnel, including employees and authorized technical contractors, are bound by strict non-disclosure obligations, comprehensive privacy agreements, and mandatory security controls. Any authorized subcontractors engaged by Cailum.Blue are contractually required to maintain data protection safeguards at least as restrictive as those outlined in our client agreements.