ACEL CLOUD PRIVACY POLICY
This Privacy Policy explains how ACEL Cloud ("we", "us", or "our") collects, uses, stores, shares, and protects personal data when you use the ACEL Cloud application, website, and related services (collectively, the "Platform").
We are committed to protecting your privacy and handling your personal data in compliance with the Nigeria Data Protection Regulation (NDPR) 2019, issued by the National Information Technology Development Agency (NITDA).
By using the Platform, you consent to the collection and use of your data as described in this Policy.
1. Scope
This Privacy Policy explains what personal data ACEL Cloud collects, how we use it, who we share it with, and the choices you have. It applies to the ACEL Cloud website, dashboard, and APIs.
1.2. Legal Basis & Regulatory Framework
This Privacy Policy is governed by:
- Nigeria Data Protection Regulation (NDPR), 2019
- NITDA Guidelines for Data Protection Compliance
- Applicable Nigerian laws relating to electronic transactions, taxation, and financial crime prevention
NDPR Core Principles (Part 2, NDPR). Under the NDPR, personal data must be:
- Collected lawfully, fairly, and transparently
- Used only for specific, legitimate purposes
- Adequate, relevant, and limited to what is necessary
- Accurate and up to date
- Stored securely
- Retained only as long as necessary
We structure our systems and policies to comply with these principles.
1.2. Who This Policy Applies To
This Policy applies to:
- Users purchasing our services
- Wallet users
- Visitors to our website or app
- Anyone interacting with our services
2. Data we collect
2.1 Account and identity data
- Name, email address, and authentication credentials, collected via Firebase Authentication.
- Workspace and role information (owner, admin, developer, viewer).
2.2 Payment data
- For fiat payments: billing details processed by our payment processor. ACEL Cloud does not store full card numbers.
- For crypto payments: public wallet addresses and on-chain transaction data, which is inherently public on the relevant blockchain.
2.3 Usage and technical data
- Job configuration, logs, and metrics associated with compute jobs you run.
- Device, browser, and IP address information, collected automatically.
- Error and performance data, collected via Sentry, to diagnose and fix issues.
2.4 Customer Content
Code, models, and data you upload or run through the Service ("Customer Content") is processed to execute your jobs, and is not used by ACEL Cloud to train any ACEL Cloud-owned model or shared with any party except as necessary to run your job on the matched Compute Provider's infrastructure.
3. How we use data
- To provide, operate, and maintain the Service, including job orchestration, billing, and support.
- To detect, prevent, and investigate fraud, abuse, and security incidents.
- To comply with legal obligations, including anti-money-laundering and know-your-customer requirements where applicable to crypto or fiat payment flows.
- To communicate with you about your account, service changes, and (where you've opted in) product updates.
Legal Basis (NDPR Part 2.2):
Processing is based on:
- User consent
- Contractual necessity
- Legal obligation
- Legitimate business interests
4. Who we share data with
We share data only as necessary to operate the Service:
- Infrastructure providers: Render, Neon, Cloudflare, Upstash, and Timescale, which host and process data on our behalf under their own data-processing terms.
- Payment processors: our fiat payment processor, for card and bank-transfer transactions.
- Compute Providers: the minimum job configuration and container data necessary to run your job on the matched third-party compute node. Compute Providers do not receive your billing or account identity data.
- Error monitoring: Sentry, for diagnosing application errors.
- Legal and safety: where required by law, legal process, or to protect the rights, property, or safety of ACEL Cloud, our users, or the public.
ACEL Cloud does not sell personal data.
5. Cryptocurrency and blockchain data
If you connect a crypto wallet or transact on-chain, be aware that blockchain transactions are public and permanent by design. ACEL Cloud cannot delete or alter data recorded on a public blockchain, even upon a data-deletion request, and this is disclosed here as a technical limitation rather than a refusal to honor such requests where they are otherwise applicable to data ACEL Cloud itself controls.
6. Data retention
We retain account and billing data for as long as your account is active and as needed to comply with legal, tax, and accounting obligations thereafter. Job logs and metrics are retained before being deleted or anonymized, unless a longer period is required for a specific legal, security, or billing-dispute purpose.
7. Your rights
Depending on where you live or are established, you may have some or all of the following rights regarding your personal data. Not every right applies in every jurisdiction where a specific law does not grant a right listed below, ACEL Cloud will still make reasonable efforts to honor the request where feasible, but is only legally required to do so where applicable law provides for it.
7.1 Rights generally available
- Access - request a copy of the personal data we hold about you.
- Correction - request that we correct inaccurate or incomplete data.
- Deletion - request that we delete your personal data, subject to legal, tax, security, or billing-dispute retention obligations described in Section 6.
- Portability - request your data in a structured, commonly used format, where technically feasible.
- Objection / restriction - object to, or request that we restrict, certain processing, including for direct marketing.
- Withdraw consent - where processing is based on your consent, withdraw it at any time without affecting processing already carried out.
7.2 Region-specific rights
- European Economic Area, United Kingdom, and Switzerland (GDPR/UK GDPR): In addition to the rights above, you have the right to lodge a complaint with your local data protection authority, and the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable.
- California and other U.S. states with comprehensive privacy laws (e.g. CCPA/CPRA, and equivalent laws in states such as Virginia, Colorado, and Connecticut): You have the right to know what personal data is collected, sold, or shared; the right to opt out of the sale or sharing of personal data (ACEL Cloud does not sell personal data, as stated in Section 4); the right to limit use of sensitive personal data; and the right not to receive discriminatory treatment for exercising these rights.
- Nigeria (NDPA / NDPR): You have the right to be informed of the purpose of data processing, to withdraw consent, and to request deletion or anonymization of your data where it was collected or processed unlawfully.
- Brazil (LGPD), Canada (PIPEDA), and other jurisdictions with similar data protection frameworks: You have equivalent rights of access, correction, deletion, and portability as described above, and the right to information about with whom we have shared your data, to the extent required by the applicable law of your jurisdiction.
- Where your jurisdiction is not specifically listed above, the general rights in Section 7.1 apply, and ACEL Cloud will assess and respond to your request in line with any locally applicable law.
7.3 How to exercise your rights
To exercise any of these rights, contact [email protected]. We may need to verify your identity before processing certain requests. We will respond within the timeframe required by the law applicable to you where no specific timeframe is legally mandated, we aim to respond within 30 days.
7.4 On-chain data limitation
As described in Section 5, some data associated with your use of the Service (such as public wallet addresses and transaction hashes) is recorded on public blockchains that ACEL Cloud does not control and cannot alter or delete, regardless of which rights above would otherwise apply to data ACEL Cloud itself holds.
8. International data transfers
Because ACEL Cloud's infrastructure providers and Compute Providers operate globally, your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.
9. Security
We use industry-standard safeguards, including encrypted transport, access controls, and secrets management, to protect personal data. No system is completely secure, and we cannot guarantee absolute security.
10. Children's privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal data from children. If we learn we have done so, we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app notice before taking effect.
12. Contact
Questions about this Privacy Policy, or requests to exercise your data rights, can be sent to [email protected]
13. Acceptance
By using the Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.