Privacy Policy
Last updated: October 2026
Introduction
Cloud Magic Software Group ("CMSG," "we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, and share information when you visit our website, purchase our software, or install and use our automation and workflow products distributed through third-party marketplaces (collectively, the "Services").
Scope of This Policy
This policy applies to:
- Software & Workflow Products — automation templates, integrations, and workflow tools we sell or distribute, including through third-party marketplaces such as Gumroad, HubSpot, Shopify, and monday.com ("Marketplace Products").
- Our Website — cloudmagic.software and all related subdomains.
- Custom Engagements — software and automation work delivered directly to clients.
Information We Collect
Information You Provide Directly
- Name, email address, and contact information
- Company name, job title, and billing details
- Communications you send to us (support requests, form submissions)
- Payment information processed through Stripe, Gumroad, or PayPal (we do not store full card numbers)
Information Collected Through Marketplace Products
When you install or use our Marketplace Products, we may access and process data from your connected platform accounts based on the permissions (OAuth scopes) you authorize during installation. This may include:
- HubSpot: Contact records, company records, deal data, and engagement history as permitted by the OAuth scopes you approve
- Shopify: Order data, customer records, product information, and fulfillment details
- monday.com: Board items, workspace data, and user information
- Gumroad: Buyer email addresses, purchase records, and product access data
- Supabase: Data stored in databases and storage buckets that you configure our products to access
We only request the minimum OAuth scopes necessary for our products to function. You can review the specific permissions requested during installation and revoke access at any time through the respective platform's settings.
Information Collected Automatically
- IP address, browser type, operating system, and device information
- Pages visited, referral URLs, and interaction data via analytics
- Cloudflare analytics data (performance, security, and traffic metrics)
How We Use Your Information
- Execute the automations and workflows you configure (e.g., syncing contacts, processing orders, triggering notifications)
- Authenticate your identity and maintain your session
- Deliver software purchases, license keys, and product updates
- Debug errors and improve product reliability
- Respond to inquiries and support requests
- Send marketing communications (only with your consent; you may unsubscribe at any time)
- Generate invoices and process payments
We do not sell, rent, or share your platform data with third parties for their own marketing or advertising purposes. Data accessed through Marketplace Products is used solely to provide the functionality you installed the product for.
Data Sharing and Third-Party Services
We share data only as necessary to operate our Services:
- Stripe, Gumroad, and PayPal — payment processing and product delivery for purchases
- Resend — transactional email delivery (purchase confirmations, support notifications)
- Cloudflare — website hosting, CDN, DNS, and security services
- Supabase — database and storage for product data you configure
- Marketplace Platforms — data flows back to the platform (HubSpot, Shopify, monday.com, etc.) as required by the integration's functionality and the OAuth scopes you approved
- Anthropic — AI processing via the Claude API for intelligent workflow features (prompts and outputs are not used for model training)
- n8n (self-hosted) — our workflow automation engine, hosted on our own infrastructure, executes the Marketplace Product automations. Your data passes through n8n only during workflow execution; it is not shared with the n8n project or any external party.
We may also disclose information when required by law, to protect our legal rights, or in connection with a merger or acquisition.
Data Retention
- Marketplace Product data: Processed in real-time or near real-time during workflow execution. We do not retain copies of your platform data beyond what is necessary for logging and debugging (typically 30 days). When you uninstall a Marketplace Product, we delete associated data within 30 days.
- Purchase and order records: Transaction records from Stripe, Gumroad, and PayPal (such as buyer email, product purchased, and amount) are retained for as long as required for accounting, tax, and legal compliance — separate from, and longer than, the operational logging window above.
- Website form submissions: Retained for the purpose of responding to your inquiry and for up to 12 months for analytics.
Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS/HTTPS) and at rest
- Access controls and least-privilege authentication
- Regular security assessments and monitoring
- Secure API key and credential management via environment variables and secret management services
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your personal data (subject to legal retention requirements)
- Restrict or object to certain processing activities
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time where processing is based on consent
California residents have additional rights under the CPRA, including the right to know what personal information is collected and the right to opt out of the sale or sharing of personal information. We do not sell personal information.
Cookies
Our website uses essential and analytics cookies to operate the site and understand usage. You can control cookies through your browser settings.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. For material changes affecting Marketplace Product data handling, we will notify affected users through the respective marketplace or via email.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
- Email: chris@cloudmagicgroup.com