Privacy Policy
Last updated: January 2025
UniCloud360 is committed to protecting the privacy of institutional clients, their staff, and their students. This policy explains how we collect, use, and protect personal information.
Data We Collect
We collect information you provide directly — for example, through contact forms or demo requests — and operational data generated through platform use, such as login events and usage logs. We do not sell personal data to third parties under any circumstances.
How We Use It
Data is used to deliver the platform, provide support, send relevant product updates, and comply with legal obligations. All marketing communications include a clear unsubscribe option, and we honour all opt-out requests promptly.
Data Residency & Security
Student data is stored with Sri Lanka data residency by default. Regional data residency options are available for institutions in Singapore and the UAE. See our Trust & Security page for full details on encryption, automated backups, and access controls.
Data Retention
We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Institutions may request data deletion upon contract termination — we provide a structured off-boarding process that includes a data export and confirmed deletion within 30 days.
Third-Party Sub-processors
We use a limited set of third-party sub-processors to deliver our services — including cloud infrastructure, payment gateways, and support tooling. A full list of sub-processors is available in our Data Processing Agreement (DPA), provided to clients on request.
Your Rights
Individuals have the right to access, correct, or request deletion of their personal data held by UniCloud360. Institutions have the right to receive a copy of all data we hold on their behalf, in a portable format. To exercise these rights, contact privacy@unicloud360.com.
Contact
For privacy enquiries or data subject requests, contact privacy@unicloud360.com. We aim to respond to all privacy-related requests within five business days.