Privacy Policy

Last updated: March 2026

Introduction

Cloud Magic Technology Group ("CMTG," "we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, and share information when you use our managed IT services, visit our website, or use our automation and workflow products distributed through third-party marketplaces (collectively, "Services").

Scope of This Policy

This policy applies to:

  • Managed IT Services — cybersecurity, cloud infrastructure, network management, and consulting engagements delivered directly to our clients.
  • Automation and Workflow Products — integrations and workflow tools distributed through third-party marketplaces including HubSpot, Shopify, monday.com, Gumroad, and other platforms ("Marketplace Products").
  • Our Website — cloudmagicgroup.com and all related subdomains.

Information We Collect

Information You Provide Directly

  • Name, email address, phone number, and contact information
  • Company name, job title, and billing details
  • Communications you send to us (support requests, change requests, form submissions)
  • Payment information processed through Stripe (we do not store full card numbers)

Information Collected Through Marketplace Products

When you install or use our Marketplace Products, we may access and process data from your connected platform accounts based on the permissions (OAuth scopes) you authorize during installation. This may include:

  • HubSpot: Contact records, company records, deal data, and engagement history as permitted by the OAuth scopes you approve
  • Shopify: Order data, customer records, product information, and fulfillment details
  • monday.com: Board items, workspace data, and user information
  • Gumroad: Buyer email addresses, purchase records, and product access data
  • Supabase: Data stored in databases and storage buckets that you configure our products to access

We only request the minimum OAuth scopes necessary for our products to function. You can review the specific permissions requested during installation and revoke access at any time through the respective platform's settings.

Information Collected Automatically

  • IP address, browser type, operating system, and device information
  • Pages visited, referral URLs, and interaction data via analytics cookies
  • Cloudflare analytics data (performance, security, and traffic metrics)

How We Use Your Information

Managed IT Services

  • Deliver, monitor, and improve managed IT, cybersecurity, and cloud services
  • Respond to support requests and change requests
  • Communicate about service updates, outages, and maintenance
  • Generate invoices and process payments

Marketplace Products

  • Execute the automations and workflows you configure (e.g., syncing contacts, processing orders, triggering notifications)
  • Authenticate your identity and maintain your session
  • Debug errors and improve product reliability
  • Communicate product updates, breaking changes, or required actions

We do not sell, rent, or share your platform data with third parties for their own marketing or advertising purposes. Data accessed through Marketplace Products is used solely to provide the functionality you installed the product for.

Website and Marketing

  • Respond to inquiries submitted through our contact and change request forms
  • Send marketing communications (only with your consent; you may unsubscribe at any time)
  • Analyze website traffic and improve user experience

Data Sharing and Third-Party Services

We share data only as necessary to operate our Services:

  • Stripe — payment processing for purchases and subscriptions
  • Resend — transactional email delivery (form confirmations, support notifications)
  • Cloudflare — website hosting, CDN, DNS, and security services
  • Marketplace Platforms — data flows back to the platform (HubSpot, Shopify, monday.com, etc.) as required by the integration's functionality and the OAuth scopes you approved
  • Anthropic — AI processing via the Claude API for automation and intelligent workflow features (prompts and outputs are not used for model training)
  • Google Cloud Platform — infrastructure hosting for backend services

We may also disclose information when required by law, to protect our legal rights, or in connection with a merger or acquisition.

Data Retention

  • Managed IT client data: Retained for the duration of the service agreement and for a reasonable period afterward as required by applicable regulations.
  • Marketplace Product data: Processed in real-time or near real-time during workflow execution. We do not retain copies of your platform data beyond what is necessary for logging and debugging (typically 30 days). When you uninstall a Marketplace Product, we delete associated data within 30 days.
  • Website form submissions: Retained for the purpose of responding to your inquiry and for up to 12 months for analytics.

Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit (TLS/HTTPS) and at rest
  • Access controls and least-privilege authentication
  • Regular security assessments and monitoring
  • Secure API key and credential management via environment variables and secret management services

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your personal data (subject to legal retention requirements)
  • Restrict or object to certain processing activities
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent

California residents have additional rights under the CPRA, including the right to know what personal information is collected and the right to opt out of the sale or sharing of personal information. We do not sell personal information.

Cookies

Our website uses essential and analytics cookies. For details, see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. For material changes affecting Marketplace Product data handling, we will notify affected users through the respective marketplace or via email.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: