Privacy Policy

MSCLOUDTECH OÜ ("we," "our," or "us") is a company registered in Estonia (Reg. No. 16617760), operating under the regulations of the European Union. This Privacy Policy explains how we collect, use, protect, and share your personal data in compliance with the General Data Protection Regulation (GDPR) and Estonian data protection laws.

By using our website or services, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please do not use our services.

We use your data to:

• Respond to your inquiries and provide requested services
• Process and fulfill service contracts
• Improve our website and user experience
• Send service-related communications (project updates, invoices)
• Comply with legal obligations under EU and Estonian law
• Protect against fraud and ensure platform security
• Analyze usage patterns to improve our offerings

We use essential cookies to ensure our website functions properly. We may also use analytics cookies to understand how visitors interact with our site.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect site functionality.

We do not sell your personal data. We may share data with trusted third parties only when necessary:

• Service providers (hosting, analytics, communication tools)
• Legal authorities when required by law
• Professional advisors (accountants, lawyers) under confidentiality
• Business partners with your explicit consent

All third parties are contractually obligated to protect your data and use it only for specified purposes.

Your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries with an adequacy decision.

We retain personal data only as long as necessary for the purposes described in this policy:

We use your data to:

• Encryption in transit (TLS) and at rest
• Access controls and authentication
• Regular security assessments
• Employee training on data protection
• Incident response procedures

For more details on our security practices, see our Security & IP page.

For any privacy-related questions, data access requests, or to exercise your rights under GDPR, contact us:

We aim to respond to all legitimate requests within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).