Privacy
Last updated 9 October 2026. This policy explains how CloudQ processes personal data when you visit cloudq.io and when you use the CloudQ Growth service.
CloudQ AS, org. no. 924 352 922, Øvre Bogenvei 1A, 3152 Tolvsrød, Norway is the data controller for information we collect about visitors to this website and about contact persons at our customers. Privacy questions can be sent to privacy@cloudq.io.
The website uses necessary cookies for login and security. Analytics and marketing cookies are set only after consent through the cookie banner, and consent can be withdrawn at any time in your browser settings or the banner. We use CloudQ Tracking and may use third-party analytics tools to measure traffic to the website.
When a customer connects ad accounts, tracking or a website to CloudQ Growth, we process that data on the customer's behalf and on the customer's instructions. The customer is the data controller. We sign a data processing agreement with every customer, and CloudQ staff do not access customer content beyond what is needed for operations, support and bug fixing as agreed with the customer. Agents that use AI models send only the information needed for the task, and model providers do not use the data for training.
When you connect Google Ads, Google Analytics or Google Search Console, CloudQ requests access through Google OAuth with the minimum scopes needed for the features you enable. We use this data only to show performance in your CloudQ workspace, to let the agents analyse it and propose actions, and to carry out actions you have approved. We do not use Google user data for advertising purposes, we do not sell it, and we do not transfer it to third parties other than the sub-processors required to run the service. People at CloudQ do not read your Google data except with your explicit permission for support or security investigations, or where required by law. CloudQ's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time in your Google Account permissions or under Connections in CloudQ. Data from a revoked connection is deleted within 30 days.
We do not share personal data with third parties for their own purposes. We use sub-processors for operations, including cloud hosting and database, AI model providers, email delivery and the tracking engine. All sub-processors are bound by data processing agreements. An up-to-date list of sub-processors is available on request. Data may also be disclosed where required by law or public authority.
Data is stored in the EU/EEA as a rule. Some sub-processors may process data in countries outside the EEA, including the United States. Such transfers rely on the European Commission's standard contractual clauses or other valid transfer mechanisms under GDPR chapter V.
Contact data from enquiries is deleted no later than 12 months after the last contact if no agreement is signed. Account and usage data is kept for the duration of the customer relationship and deleted or anonymised no later than 90 days after termination, unless the law requires longer retention, for example accounting legislation. Audit logs are kept for up to 24 months for security reasons.
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Consent can be withdrawn at any time. Requests are answered within 30 days. If you believe we process data in breach of the regulations, you can complain to the Norwegian Data Protection Authority at datatilsynet.no.
We use encrypted transfer and storage, access control per domain and member, logging of all write operations and regular security reviews. In the event of a personal data breach we notify the supervisory authority and affected customers in line with GDPR.
We may update this policy when the service or the regulations change. Material changes are announced to customers by email or in the service. The current version is always available at cloudq.io/policy.