Last updated: September 27, 2026
We collect information you provide directly to us:
When you use the Service, we automatically collect:
We use collected information to:
Training data you upload is used solely to provide the Service to you. We do not use your training data to train our own models, share it with third parties, or use it for any purpose other than powering your AI agents. Your training data is stored encrypted at rest and deleted within 30 days of account cancellation.
When you connect a third-party platform to your agent (such as a Shopify store or a messaging channel), your agent accesses data from that platform only to serve your customers:
When a business uses CloudTrain to talk to its customers, we process those customers' information on the business's behalf: the messages exchanged on WhatsApp, Instagram, Messenger, Telegram, Discord and website chat; the leads the assistant saves (name, email, phone number, and what they asked for); and the bookings it makes (the service, the time, and the contact details given).
The business is the controller of that data and decides what its assistant collects; we act as its processor. We use it only to provide the Service to that business - answering its customers, notifying it of new leads and bookings, and sending the reminders it turns on - and we delete it when the business deletes it or closes its account. A customer who wants their data corrected or deleted can ask the business, or contact us.
A business can connect a Google Calendar so its assistant never offers a time the business is busy and every booking appears in its calendar. When it does, with its permission, we access:
CloudTrain's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the calendar features described above. We do not sell it, use it for advertising, use it to train or improve AI or machine-learning models, or let people read it, except with the business's permission, for security, or where the law requires.
Access tokens are stored encrypted. Busy times are held for a few minutes at most; event identifiers are kept with the booking they belong to and deleted with it. The business can disconnect Google Calendar in CloudTrain at any time, which deletes our tokens, or revoke access from its Google Account permissions.
We do not sell your personal information. We may share information with:
We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, scoped API keys, and regular security audits. However, no method of transmission or storage is 100% secure.
We retain your account information for as long as your account is active. Training data and agent configurations are deleted within 30 days of account cancellation. Usage logs are retained for up to 12 months for analytics and security purposes.
You have the right to:
We use cookies and similar technologies in three ways:
_fbp, and _fbc if you arrived via an ad) and shares the fact of that visit or signup with Meta, which uses it as an independent controller under its own privacy policy.We do not sell your data or use these tools to profile the contents of your conversations. You can block or delete cookies through your browser settings, and browser-level tracking protection or an ad blocker will prevent the analytics and advertising cookies from being set at all. Blocking them does not affect your use of the Service.
The Service is not intended for users under the age of 16. We do not knowingly collect information from children under 16.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.
For privacy-related questions, contact us at [email protected].