Privacy Policy

1. Who We Are

Cloudsilicon Limited is a Canadian corporation registered in Ontario, operating as a cybersecurity reseller and authorized Gold Partner of Bitdefender. We primarily resell third-party products, including Bitdefender GravityZone products (“Vendor Products”), and provide managed security services to businesses across Canada and the United States. As a reseller, we do not design, manufacture, or control the underlying Vendor Products.

Our Privacy Officer can be reached at support@cloudsilicon.com or by calling 1-888-266-5334.

2. Scope

This Privacy Policy applies to:

• Our website at cloudsilicon.com and all associated pages.
• Client communications, onboarding, billing, and renewal processes.
• Data collected through our contact forms, quote request forms, support forms, and breach check tool.
• Data collected through our Zoho CRM and support platform.

This Privacy Policy does not apply to Vendor Products themselves, which are governed by the respective vendor’s privacy policy. For Bitdefender’s privacy practices, please refer to Bitdefender’s Privacy Policy.

3. Information We Collect

We collect information in the following categories:

• Personal Information: Name, job title, email address, phone number, billing address, and payment details.
• Business Information: Company name, company size, industry, and website.
• Transactional Information: Purchase history, license keys, subscription details, renewal records, and billing history.
• Technical Information: IP address, device identifiers, browser type, operating system, pages visited, and session duration. This is collected automatically via standard web server logs and analytics.
• Support Communications: Emails, support tickets submitted through our Zoho-powered support form, and any information you include when describing a technical issue.
• Breach Check Data: Email addresses submitted through our free dark web breach check tool. See Section 5 for specific handling of this data.

We collect only the minimum information necessary to deliver our services and communicate with you effectively.

4. How We Use Your Information

We use collected information for the following purposes:

• To process orders, activate licenses, and manage subscriptions.
• To issue invoices, process payments, and maintain billing records.
• To provide customer service, technical support, and respond to inquiries.
• To communicate about service updates, renewal reminders, security advisories, and product notices.
• To comply with legal and regulatory obligations, including Canadian GST/HST reporting requirements.
• To detect, investigate, and prevent fraudulent activity or unauthorized access to our systems.
• To follow up with prospects who have submitted quote requests or breach check results and indicated interest in our services.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

5. Dark Web Breach Check Tool

Our website offers a free email breach check powered by the Have I Been Pwned (HIBP) API, operated by Troy Hunt. When you submit your email address for a breach check, the following applies:

• Your email address is transmitted securely to HIBP’s API via our Cloudflare Worker proxy. This proxy ensures your email is never exposed directly in browser traffic and that our HIBP API credentials remain server-side at all times.
• HIBP checks your email against its database of publicly known data breaches and returns a count and list of breach sources. CloudSilicon does not receive or store the raw breach data.
• Your email address is stored in our Zoho CRM only if you proceed through the result gate and consent to follow-up contact by entering your email in the lead capture step.
• We do not share breach check results with third parties. Results are used solely to contextualize your security consultation.
• Breach data sourced from HIBP is publicly available information compiled from known breach incidents. CloudSilicon makes no representations about the completeness, currency, or accuracy of this data.

6. Refunds and Returns

• All sales are final.
• Once goods, licenses, or services are delivered or activated, they cannot be refunded, cancelled, exchanged, or adjusted in any way.
• Customers are responsible for ensuring product compatibility and suitability prior to purchase.

7. Sharing of Information

We do not sell or rent personal information to third parties for marketing purposes. We may share your information in the following limited circumstances:

• With Bitdefender: To provision, activate, transfer, and manage GravityZone licenses on your behalf. This includes your name, company name, email address, and license details.
• With Pax8 (Canada distributor): Our primary distribution partner through whom Bitdefender licenses are procured. Account details are shared as required to process orders.
• With Zoho: We use Zoho CRM for client relationship management and Zoho Desk for support ticketing. Data submitted through our website forms is processed by Zoho in accordance with their privacy policy.
• With Cloudflare: Our Cloudflare Workers infrastructure processes breach check requests. Cloudflare may log request metadata in accordance with their privacy policy.
• With payment processors: Payment details are handled by our payment processing partners and are never stored on CloudSilicon systems.
• As required by law: To comply with subpoenas, court orders, government regulations, or law enforcement requests.
• In business transfers: If CloudSilicon Limited is acquired, merged, or restructured, personal information may be transferred as part of that transaction. We will notify affected clients.

8. International Clients and Data Transfers

CloudSilicon serves clients across North America. Our primary operations and data storage are located in Canada. However, some of our service providers — including Bitdefender (Romania/US), Zoho (India/US), and Cloudflare (US) — may process your data outside Canada.

By providing personal information and using our services, you consent to the transfer of your information to these jurisdictions. We ensure that all third-party processors maintain privacy and security standards consistent with or exceeding PIPEDA requirements.

9. Data Retention

We retain personal information only as long as necessary for business purposes or legal compliance:

• Client billing records: Retained for a minimum of seven (7) years in accordance with Canadian tax law.
• Support tickets: Retained for three (3) years after resolution.
• Prospect and lead data: Retained for up to two (2) years from last interaction, or until you request deletion.
• Breach check email addresses: Retained only if you consented to follow-up contact. Deleted upon request.
• Website technical logs: Retained for up to 90 days.

You may request deletion of your personal information at any time, subject to our legal retention obligations.

10. Security

We implement appropriate technical and organizational measures to protect your personal information:

• All data transmitted between your browser and our services uses TLS encryption.
• Our breach check tool uses a server-side Cloudflare Worker proxy so that API credentials and intermediate data are never exposed in the browser.
• CRM access is restricted to authorized CloudSilicon personnel with role-based permissions.
• Payment information is processed by third-party payment processors and is never stored on CloudSilicon systems.
• We conduct periodic reviews of our data handling practices.

However, no system is 100% secure. In the event of a data breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

11. Your Rights Under PIPEDA

As a Canadian company subject to PIPEDA, we recognize the following rights:

• Right of access: You may request a copy of the personal information we hold about you.
• Right to correction: You may request correction of inaccurate or incomplete information.
• Right to withdraw consent: You may withdraw consent to the collection or use of your information for marketing communications at any time.
• Right to deletion: You may request deletion of your personal information, subject to our legal retention obligations.
• Right to complain: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

To exercise any of these rights, contact our Privacy Officer at support@cloudsilicon.com or call 1-888-266-5334. We will respond within 30 days.

12. Cookies

Our website uses minimal cookies necessary for basic site functionality. We do not use advertising cookies, behavioural tracking cookies, or third-party retargeting. Analytics data, where collected, is processed in aggregate and is not linked to individual identities. You may disable cookies in your browser settings without affecting your ability to use our website.

13. Children’s Privacy

Our services are directed exclusively to businesses and their authorized representatives. They are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has submitted personal information, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or service offerings. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of our services after changes are posted constitutes your acceptance of the revised policy.

15. Contact Us

• CloudSilicon Limited
• Ontario, Canada
• Phone: 1-888-266-5334
• Email: support@cloudsilicon.com