Privacy Policy

Information you provide:

• Account information (name, email address, password hash, profile picture, phone number where applicable).
• Communications you send us (support requests, feedback, survey responses).
• Content you create or upload while using the Service.
• Payment information (processed by our payment processor — we do not store full card numbers).

Information collected automatically:

• Device information (model, OS version, unique device identifiers, language settings).
• Log data (IP address, access times, pages or screens viewed, crash reports).
• Usage data (features used, session duration, interaction events).
• Cookies and similar technologies (see "Cookies" below).

Information collected via Accessibility Services:

• WebCloudNest requests access to the AccessibilityService API solely to perform its core function — for example, to detect the foreground app, present a security overlay (such as a PIN screen or app lock), or assist users with navigation.
• Accessibility events are processed locally on your device and are NOT transmitted to our servers, sold, or shared with third parties.
• We do not capture screen content, typed text, passwords, or any sensitive information from other apps via accessibility events beyond the minimum metadata required to identify the active app package name.
• You may revoke accessibility permission at any time from your device settings; doing so may disable certain core features.

Biometric & PIN data:

• When you set a PIN, password, pattern, or enable biometric authentication (fingerprint/face), these credentials are stored locally on your device using the platform-provided secure storage (e.g. Android Keystore / iOS Keychain).
• We never transmit your biometric data, PIN, password, or pattern to our servers.
• Biometric authentication is handled by your device’s operating system; we receive only a success/failure signal.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate users and prevent fraud or abuse.
• Process transactions and manage subscriptions.
• Respond to support requests and communicate with you about the Service.
• Send service announcements, security alerts, and (with consent where required) marketing communications.
• Improve the Service through analytics, A/B testing, and crash diagnostics.
• Comply with legal obligations and enforce our Terms of Service.

If you are in the European Economic Area, United Kingdom, or another GDPR-equivalent jurisdiction, we process your data on the following legal bases:

• Performance of a contract — to provide the Service you requested.
• Legitimate interests — to operate, secure, and improve the Service, provided your rights do not override these interests.
• Consent — for optional marketing communications and certain cookies.
• Legal obligation — to comply with applicable law and regulatory requirements.

Service providers:

• We work with trusted third-party providers who process data on our behalf under written contracts that require confidentiality and appropriate security.
• Our key providers include: Google Analytics (usage analytics), Cloudflare (CDN and DDoS protection), Stripe (payment processing), AWS (hosting and storage), Sentry (error monitoring).

Legal & safety:

• We may disclose information if required by law, court order, or other legal process.
• We may share information to protect our rights, property, safety, or that of our users or the public.
• In a corporate transaction (merger, acquisition, or asset sale), user information may be transferred subject to confidentiality protections.

With your consent:

• We share information with third parties when you explicitly authorize us to do so.

Typical retention periods:

• Account data — for the lifetime of your account plus a reasonable wind-down period after deletion.
• Transaction records — as required by applicable tax and accounting law (typically 7 years).
• Logs and analytics — usually 90 days to 13 months, depending on the data type.
• Backups — securely retained for limited periods before automated purge.

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion ("right to be forgotten") — request that we delete your data, subject to legal exceptions.
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests or for direct marketing.
• Withdraw consent — at any time, where processing is based on consent.
• Lodge a complaint — with your local data protection authority.

Categories we use:

• Strictly necessary — required for the Service to function (e.g. authentication, security).
• Functional — remember your preferences and settings.
• Analytics — help us understand how the Service is used.
• Marketing — used only with your consent in regions where required.

Examples of permissions we may request:

• Notifications — to deliver alerts you opt into.
• Camera / Photos — to upload images or scan codes (only when you initiate the action).
• Storage — to save files you create or download.
• Biometrics — for secure authentication, processed only by your device.
• Accessibility — used strictly for the documented purpose of providing the core security/automation feature; not used to read, exfiltrate, or store screen content.

For privacy-related questions, requests, or complaints, contact our Data Protection contact at:

Email: webcloudnest@gmail.com

Address: WebCloudNest, Surat, Gujarat, India