Privacy Policies Hub

WEBSITE USERS PRIVACY POLICY

Effective Date: 22 September 2025

Version 1.2

1. INTRODUCTION

Cloud Linux Software, Inc. (“CloudLinux”, “We,” “Us,” or “Our”) is committed to protecting the privacy of the website users (“You” or “Your”). This Privacy Policy outlines how we collect, use, share, and protect your personal data when you visit cloudlinux.com, imunify360.com, patchman.co, and tuxcare.com (“Site” or collectively “Sites”). This Privacy Policy does not apply to our customers, employees, or candidates.

CloudLinux reserves the right to revise the Privacy Policy at our sole discretion at any time. Any revisions to the Privacy Policy will be effective immediately upon posting by CloudLinux. For any material changes to the Privacy Policy, We will take reasonable steps to notify you of such changes via a banner on the website, email notification, another method, or a combination of methods. In all cases, your continued visiting the Sites after publication of such changes, with or without notification, constitutes binding acceptance of the revised Privacy Policy. If at any time the Privacy Policy is no longer acceptable to You, you should immediately cease all use of this Site.

We encourage you to periodically review this document for the latest information on our privacy practices.

2. WHO WE ARE

CloudLinux Software, Inc. is registered at 20791 Three Oaks Pkwy, #980, Estero, FL 33929, USA, and may process your personal data in accordance with the purposes outlined in this Privacy Policy and in compliance with applicable data protection regulations. For any questions about this Policy or further information on our data management practices, please contact our Data Protection Officer (DPO) at [email protected].

3. INFORMATION WE COLLECT AND PROCESS

We may collect personal information about you in various ways, including when you visit our Sites, register for an account, or subscribe to our newsletters. We store your data securely, share it only with authorized personnel and third-party service providers as necessary, and retain it only as long as required by law. You have the right to access, correct, or request the deletion of your personal data at any time.

The types of information we may collect include:

Personal Information: Full name, email address, phone number, and any other information you provide when creating an account or filling out forms.
Non-Personal Information: IP address, browser type, operating system, referring URLs, and pages viewed.
Cookies and Tracking Technologies: We use cookies and similar technologies to collect information about your browsing behavior.
Communications: If you communicate with us, we may collect information relating to that communication, whether it takes the form of email, fax, letter, forum posting, testimonials, or any other form of communication between you and CloudLinux or submitted by you to the Site.
Interactions with our AI Chatbot: When you use our AI-powered chatbot on our websites, we process the content of your queries and the chatbot’s replies in order to provide you with an answer. Conversation history (both your messages and the chatbot’s responses) is stored, but it is not fingerprinted or linked to your personal identity.

All processing of chatbot data occurs on our secure servers located within the European Union. This data is used only to respond to your inquiries and to improve the accuracy and quality of the chatbot’s responses. Neither we nor our AI provider uses your conversation data to train AI models.

If you choose to request human support through the dedicated support form integrated with the chatbot, you may voluntarily provide personal information. Any information submitted through this form is collected separately and processed as described further in the Client’s Privacy Policy, and is not shared with the AI provider.

To further protect your privacy, please do not include sensitive personal information in the chatbot conversation.

4. HOW WE USE YOUR INFORMATION

We may use your personal information for the following purposes:

To provide and enhance our services: We use your information to operate and maintain our Sites, respond to your inquiries, and improve our content and user experience.
Personalized Content: We may provide you with more relevant information based on the content you have previously viewed and adjust the website to better align with your interests and preferences.
Marketing Communications: We may send you promotional materials, newsletters, and other information about our products and services. You can opt out of marketing communications at any time by following the unsubscribe instructions in our emails.
Product Updates and Important Information: We may use your contact details to send you valuable and important information related to our products and services, ensuring that you stay informed about key updates and improvements.

5. HOW WE SHARE YOUR PERSONAL DATA

We will share your personal information only in the following situations:

Third-party widgets: Our blogs and forums might contain widgets and social media features, such as the Twitter “tweet” or Facebook “like” buttons. These widgets and features may collect your IP address, and which page you are visiting on the Sites, and may set a cookie to enable the feature to function properly. Widgets and social media features are either hosted by a third party. Your interactions with these features are governed by the privacy policy of the company providing them.
Service Providers: We may share your personal information with trusted third-party service providers who assist us in operating our business and improving your experience. For example, we use HubSpot for customer relationship management, Google Suite services like Google Analytics and Google Tag Manager for data analysis and website optimization, and Zendesk for customer support. These service providers are authorized to use your personal information only as necessary to provide these services.

6. INTERNATIONAL DATA TRANSFERS

International Transfer to third parties

This Privacy Policy will apply even if we transfer Personal Data to third parties in other countries. We have taken appropriate safeguards to ensure that your Personal Data will remain protected wherever it is transferred. When we share the Personal Data of individuals in the European Economic Area (“EEA”), Switzerland, or the United Kingdom (“UK”), we make use of the Standard Contractual Clauses (which have been approved by the European Commission) and the UK International Data Transfer Addendum (as defined within our Data Processing Agreements mentioned in the License Agreements) as well as additional safeguards where appropriate (such as commercial industry-standard secure encryption methods to protect customer data at rest and in transit, TLS for hosted sites, web application firewall protection, and other appropriate contractual and organizational measures). We are also certified to the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), and the UK Extension to the EU-U.S. Data Privacy Framework (UK DPF) Principles to help safeguard the transfer of information we collect from the EEA, Switzerland, and the UK. Please see our Data Privacy Framework notice below for more information.

Data Privacy Framework Notice

Cloud Linux Software, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), and the UK Extension to the EU-U.S. Data Privacy Framework (UK DPF) as set forth by the U.S. Department of Commerce. Cloud Linux Software, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) concerning the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. Cloud Linux Software, Inc. has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) concerning the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. Cloud Linux Software, Inc. has certified to the U.S. Department of Commerce that it adheres to the UK Extension to the EU-U.S. Data Privacy Framework Principles (UK DPF Principles) concerning the processing of personal data received from the United Kingdom in reliance on the UK DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles and/or the UK DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program and to view our certification, please visit https://www.dataprivacyframework.gov/.

Concerning personal data received or transferred under the Data Privacy Frameworks, CloudLinux is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC). The Federal Trade Commission has jurisdiction over CloudLinux’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

Under the Data Privacy Frameworks, EU, Swiss, and UK individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Data Privacy Frameworks, should direct their query to [email protected]. If requested to remove data, we will respond within a reasonable timeframe.

We will provide an individual opt-out or opt-in choice before we share your data with third parties other than our agents, or before we use it for a purpose other than for which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to [email protected].

In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including meeting national security or law enforcement requirements.

CloudLinux’s accountability for personal data that it receives in the United States under the Data Privacy Frameworks and subsequently transfers to a third party is described in the Data Privacy Frameworks Principles. In particular, CloudLinux remains responsible and liable under the Data Privacy Framework Principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles unless CloudLinux proves that it is not responsible for the event giving rise to the damage.

In compliance with the EU-U.S. DPF, the Swiss-U.S. DPF, and the UK DPF, Cloud Linux Software, Inc. commits to referring unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the Swiss-U.S. DPF, and the UK DPF to VeraSafe, an alternative dispute resolution provider based in the United States and the European Union. If you do not receive a timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit the VeraSafe Data Privacy Framework Dispute Resolution Procedure for more information or to file a complaint. The services of VeraSafe are provided at no cost to you. More information about VeraSafe, an alternative dispute resolution provider, is provided in section 10(c) below.

ACCESSING OR USING OUR SITES OR SERVICES, OR OTHERWISE PROVIDING INFORMATION TO US OR OUR CUSTOMERS, CONSTITUTES CONSENTING TO OUR POTENTIAL TRANSFER, PROCESSING, AND STORAGE OF SUCH INFORMATION IN THE UNITED STATES.

7. DATA SECURITY

We implement various security measures to protect your personal information. We use Transport Layer Security (TLS) technology to encrypt sensitive information during transmission and store it securely. Access to personal data is limited to authorized personnel only. If you have any questions about the security of your personal information, you can contact us at [email protected] or visit our Security and Compliance web section.

8. DATA RETENTION

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. After a reasonable period, we will either delete or anonymize your information. We retain the Personal Data that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes, and enforce our agreements). When we have no ongoing legitimate business need to process your Personal Data, we securely delete the information or anonymize it. We will delete this information at an earlier date if you so request, as described in the section “Your Privacy Rights and Choices” below.

9. YOUR RIGHT AND CHOICES

You have the following rights regarding your personal information:

Access and Correction: You can request access to the personal information we hold about you and request corrections if the information is inaccurate or incomplete.
Opt-Out of Marketing Communications: You can opt out of receiving promotional emails by following the unsubscribe instructions provided in our communications.
Data Deletion: You can request the deletion of your personal information by contacting us at [email protected].
Right of access: In accordance with Art. 15 GDPR, you may have the right to obtain confirmation from us as to whether or not your personal data is processed by us, and, where that is the case, to request access to your personal data. However, this is not an absolute right, and the interests of other individuals may restrict your right of access. Also, you may have the right to obtain a copy of your personal data that is undergoing processing. For additional copies requested, we may charge a reasonable fee based on administrative costs.
Right to rectification: By Art. 16 GDPR, you may have the right to obtain from us the rectification of inaccurate personal data. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure (right to be forgotten): By Art. 17 GDPR, you have the right to request that we delete your personal data. Please keep in mind that we may keep your personal data if it is still necessary for:

fulfilling our legal obligation;
archival, historical, or scientific research or statistical purposes; or
determination, exercise, or defense of our legal claims.

Right to restriction of processing: By Art. 18 GDPR, you have the right to request that we restrict the processing of your personal data. In this case, the respective personal data will be marked accordingly and may only be processed by us for certain purposes.
Right to personal data portability: By Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and/or to request the transfer of this personal data to another entity.
Right to object: If you have given your consent to the processing of your data under Art. 7 III GDPR, you may revoke your consent at any time in the future.

You are not legally required to provide your personal data to us. However, choosing not to provide certain information may limit our ability to fulfill specific obligations, such as actions related to website users. Providing accurate and complete information is important to support our relationship with you

10. COOKIES AND TRACKING TECHNOLOGIES

Cookies

A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the site again, the cookie allows that site to recognize your browser. Cookies may store user preferences and other information. Cookies provide a convenience feature to save you time or tell the Web server that you have returned to a specific page. Cookies set by the website owner (in this case, CloudLinux) are called “first-party cookies”. Cookies set by parties other than the website owner are called “third-party cookies”. Third-party cookies enable third-party features or functionality to be provided on or through the website (e.g., advertising, interactive content, and analytics). The parties that set these third-party cookies can recognize your computer both when it visits the website in question and also when it visits certain other websites. Your cookie consent is renewed every 6 (six) months or in case we add any new third-party cookies.

Why do we use cookies?

We use first-party and third-party cookies for several reasons. Some cookies are required for technical reasons for our Sites to operate, and we refer to these as “strictly necessary” cookies. Other cookies also enable us to track and target the interests of our users to enhance the experience on our Sites and services. For example, CloudLinux keeps track of the Sites and pages you visit within CloudLinux, to determine which portion of the Site or services is the most popular or most used. This data is used to deliver customized content and promotions within the Site and services to customers whose behavior indicates that they are interested in a particular subject area. Third parties serve cookies through our Sites for advertising, analytics, and other purposes. This is described in more detail below.

What types of cookies do we use and how do we use them?

The specific types of first- and third-party cookies served through our Sites and the purposes they perform. For a list of the cookies used by CloudLinux, see our cookie banner when you visit our Sites for the first time. These cookies include:

Strictly Necessary cookies: These cookies are strictly necessary to provide you with services available through our Sites.
Performance and functionality cookies: These cookies are used to enhance the performance and functionality of our Sites, but are non-essential to their use. However, without these cookies, certain functionality may become unavailable.
Targeting cookies: Targeting cookies are used to identify visitors between different websites, e.g., content partners and banner networks. Those cookies may be used by us to build a profile of visitor interests or show relevant ads on other websites.
Unclassified cookies: These are cookies that do not belong to any other category or are in the process of categorization.

Log files

As is true of most websites, we gather certain information automatically. This information may include Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and administer the site.

Behavioral Targeting

We partner with a third party to manage our advertising on other sites. Our third-party partner may use cookies or similar technologies to provide you with advertising based on your browsing activities and interests. If you wish to opt out of interest-based advertising, click here (or if located in the European Union, click here). Please note you will continue to receive generic ads.

11. SUPPLEMENTAL ADDENDUM FOR CALIFORNIA RESIDENTS

Applicability

This section applies only to California individuals. It describes how we collect, use, and share California consumers’ Personal Information in our role as a business, and the rights applicable to such residents. If you are unable to access this Privacy Policy due to a disability or any physical or mental impairment, please contact us and we will arrange to supply you with the information you need in an alternative format that you can access. For purposes of this section, “Personal Information” has the meaning given in the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”).

How We Collect, Use, and Share Your Personal Information

We might collect the following statutory categories of Personal Information:

Identifiers, such as names, addresses, telephone numbers, fax numbers, physical addresses, and email addresses. We collect this information directly from you or third-party sources.
Internet or network information, such as browsing and search history. We collect this information directly from your device.
Geolocation data, such as IP address. We collect this information from your device.
Other personal information, in instances when you interact with us online, by phone, or by mail in the context of receiving help through our help desks or other support channels; participation in customer surveys or contests; or in providing the service.

The business and commercial purposes for which we collect this information are described in this Privacy Policy. The categories of third parties to whom we “disclose” this information for business purposes are described in this Privacy Policy.

Sensitive Personal Information

We do not collect or process any categories of Sensitive Personal Information as defined under the California Privacy Rights Act. If this practice changes, we will update this Privacy Policy and provide appropriate notice to ensure compliance with applicable laws.

Your California Rights

You have certain rights regarding the Personal Information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law. Your rights include:

The right of access: You may request that we disclose what Personal Information we have collected, used, and disclosed about you in the past 12 months.
The right to deletion: You have the right to request that we delete Personal Information collected or maintained by us, subject to certain exceptions.
The right to correction: Under the CPRA, you may request that we correct inaccurate Personal Information we hold about you.
The right to limit the use of Sensitive Personal Information: You may request to limit our use of your Sensitive Personal Information to specific business purposes.
The right to opt-out of sharing or selling: While CloudLinux does not sell Personal Information to third parties, the CPRA also provides the right to opt-out of certain “sharing” of Personal Information for targeted advertising purposes.
The right to non-discrimination: You will not receive any discriminatory treatment when you exercise one of your privacy rights.

CloudLinux does not sell Personal Information to third parties (under California Civil Code §§ 1798.100–1798.199, also known as the California Consumer Privacy Act of 2018).

How to Exercise Your California Rights

You can exercise your rights yourself, or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent’s identity to protect your Personal Information.

Please use the contact details provided in this Privacy Policy if you would like to:

Access this policy in an alternative format;
Exercise your rights;
Learn more about your rights or our privacy practices; or
Designate an authorized agent to request on your behalf.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website with a new effective date. We encourage you to review this policy periodically for any updates.

13. OTHER IMPORTANT PRIVACY INFORMATION

We never sell Personal Data

We will never sell your Personal Data to any third party.

Information About Children

CloudLinux products and/or services are not directed at persons under 16, and we do not knowingly collect Personal Information from children under 16. If you become aware that your child has provided us with Personal Information without your consent, then please contact us using the details above so that we can take steps to remove such information and terminate any account your child has created with us.

Dispute Resolution

Within the scope of this Privacy Policy, if a privacy complaint or dispute relating to Personal Data received by CloudLinux in reliance on the Data Privacy Framework (or any of its predecessors) cannot be resolved through CloudLinux’s internal processes, we have agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here: https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/

If a complaint or dispute cannot be resolved through CloudLinux’s internal process, we have also agreed to cooperate with the EU and UK data protection authorities and the Swiss Federal Data Protection and Information Commissioner and to participate in the dispute resolution procedures of the panel established by such data protection authorities.

For any dispute arising under the EU-U.S. Data Privacy Framework (DPF) program, the UK Extension to DPF, and the Swiss-U.S. Data Privacy Framework program that is not resolved through the steps described in this section, under certain conditions, you may invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms. See more details

https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction

Third-Party Links

Our Sites may contain links to third-party websites. We do not control the privacy practices of these websites, and we encourage you to review their privacy policies before providing any personal information.

Testimonials

We display personal testimonials of satisfied customers on our Sites in addition to other endorsements. With your consent, we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at [email protected]

Social Media Widgets

CloudLinux Sites may include links that direct you to other websites or services whose privacy practices may differ from ours. Your use of and any information you submit to any of those third-party sites is governed by their privacy policies, not this one.

14. CONTACT US

If you have any questions about this Privacy Policy, would like more information about how we manage your personal data, or need to contact our Data Protection Officer (DPO), please reach out to us at:

Cloud Linux Software, Inc.
Email: [email protected]

Our Representative in the European Union (EU)

In accordance with Article 27 of the General Data Protection Regulation (GDPR), we have appointed a representative in the EU to act as a point of contact for data subjects and supervisory authorities. You can contact our EU representative at:

IT.LAW GmbH

Cloud Linux Software Inc – Colmantstraße 15 53115 Bonn, Germany
E-Mail: [email protected]

Our Representative in the United Kingdom (UK)

In accordance with Article 27 of the UK General Data Protection Regulation (UK-GDPR), we have appointed a representative in the UK to act as a point of contact for data subjects and supervisory authorities. You can contact our UK representative at:

Rickert Services Ltd UK

Cloud Linux Software Inc – PO Box 1487 Peterborough PE1 9XX United Kingdom
E-Mail: [email protected]