Privacy Policy
This policy explains what information we handle when you use DataFlight, and how data flows through the third-party services you choose to connect.
Last updated: 5 July 2026
DataFlight is operated by Cloudploys Pty Ltd ("Cloudploys", "we", "us", "our"), Melbourne, Australia. This Privacy Policy applies to the DataFlight platform, websites, and related services (the "Service"). By using the Service you agree to the handling of information described here.
1. Summary
- We collect the minimum needed to provide the Service.
- When you connect a third-party application, we access only the data you authorise, and only to perform actions you request.
- We rely on third-party providers and infrastructure. We are not responsible for the independent practices, availability, or security of those third parties.
- You can disconnect any integration at any time, which removes the stored access for that connection.
2. Information we handle
Account & organisation data. Names, work email addresses, organisation details, and role/permission settings used to operate your account.
Content you provide. Messages, prompts, files, and other content you or your users submit to the Service.
Connected third-party data. When you authorise an integration (for example via OAuth), we may access data from that provider strictly within the scopes you approve — such as reading or writing documents, messages, or records — to carry out the actions you request. We do not request access beyond what an integration requires.
Usage & technical data. Log data, device/browser information, and diagnostic events used to operate, secure, and improve the Service.
3. Third-party integrations & providers
The Service is designed to work with third-party applications, platforms, and infrastructure providers (for example, connector and authentication providers, cloud hosting, model and API providers, and the apps you connect such as document, storage, messaging, or design tools). These third parties operate independently under their own terms and privacy policies.
You acknowledge that:
- Your use of any connected third-party application is governed by that provider's own terms and privacy policy, not this policy.
- We are not responsible or liable for the data-handling practices, security, availability, accuracy, or actions of any third-party provider or connected application.
- Credentials and tokens for your connections are held to enable the Service to act on your behalf, and are removed when you disconnect the relevant integration.
- Data you route through the Service may be processed by third-party infrastructure and API providers as required to deliver the requested functionality.
4. How we use information
- To provide, maintain, secure, and improve the Service;
- To perform the actions and automations you request, including via connected integrations;
- To communicate with you about your account and the Service;
- To comply with legal obligations and enforce our terms.
We do not sell your personal information.
5. Storage, security & retention
We apply reasonable technical and organisational measures appropriate to the nature of the Service, including tenant separation and access controls. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
We retain information for as long as needed to provide the Service and for legitimate business or legal purposes. When you disconnect an integration, the stored access for that connection is removed.
6. Your choices & rights
Subject to applicable law, you may request access to, correction of, or deletion of personal information we hold about you, and you may disconnect any integration at any time from within the Service. To make a request, contact us using the details below. Where required, we will handle requests in accordance with the Australian Privacy Principles and other applicable laws.
7. International processing
The Service and the third parties it relies on may process data in locations outside your own. By using the Service you consent to such processing as necessary to deliver the functionality you request.
8. Changes to this policy
We may update this Privacy Policy from time to time. Changes are effective when posted on this page, with the "Last updated" date revised accordingly. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
9. Contact
Questions about this policy or your data can be directed to:
Cloudploys Pty Ltd
Melbourne, Victoria, Australia
[email protected]
This document is provided for general informational purposes and does not constitute legal advice.