This Privacy Policy explains how CloudAgg (“CloudAgg”, “we”, “us”) collects, uses, and protects information when you visit cloudagg.com (the “Site”) or use the CloudAgg scale ticketing and inventory platform (the “Service”). We serve aggregate operators across the United States and Canada, with teams in Toronto, Ontario and Dallas, Texas.
By using the Site or the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Site or the Service.
1. Information we collect
Information you give us
- Contact and demo requests. When you fill out a contact or demo form, we collect your name, company, email address, phone number, and anything you write in your message.
- Account information. When your company subscribes to the Service, we collect the names, email addresses, and roles of the users your administrator creates, along with company and billing details.
- Operational data. The Service stores the business records your company enters or generates while running its operation — scale tickets, weights, customers, trucks, products, price lists, invoices, payments, and reports (“Customer Data”). Your company owns this data; we process it only to provide the Service.
Information collected automatically
- Usage and log data. Like most online services, our servers record technical information such as IP address, browser type, pages visited, and timestamps. We use this for security, troubleshooting, and understanding how the Site and Service are used.
- Cookies. The Service uses cookies that are necessary to keep you signed in and to keep your session secure. The Site uses only minimal cookies; we do not run third-party advertising trackers.
2. How we use information
- To provide, operate, secure, and support the Service.
- To respond to your inquiries and demo requests.
- To send service communications — things like invoices, security notices, and important product updates.
- To improve the Site and the Service, using aggregated or de-identified information wherever possible.
- To comply with legal obligations.
We do not sell personal information, and we do not use Customer Data for advertising.
3. Accounting integrations (QuickBooks Online, Sage)
If your company chooses to connect the Service to a supported accounting system — such as QuickBooks Online or Sage — the connection works as follows:
- Authorization is handled by the accounting provider. You sign in on the provider's own pages using OAuth 2.0. CloudAgg never sees or stores your Intuit or Sage username or password.
- What we exchange. With your authorization, the Service syncs accounting records between CloudAgg and your accounting system — such as customers, items, invoices, and payments — so your ticketing and your books stay consistent.
- How tokens are protected. The OAuth access and refresh tokens the provider issues are stored encrypted at rest using AES-256 encryption and are used solely to perform the sync you configured.
- Disconnecting. An administrator can disconnect the accounting integration from within the Service at any time, which revokes and deletes the stored tokens. You can also revoke CloudAgg's access from your account with the provider.
Your use of the accounting system itself is also governed by that provider's own terms and privacy statement — for QuickBooks Online, intuit.com/privacy/statement; for Sage, sage.com/en-us/legal/privacy-and-cookies.
4. How we share information
We share information only in these limited circumstances:
- Service providers. We use a small number of vendors to run the Service — such as cloud hosting and transactional email delivery. They may process information only as needed to provide their service to us, under confidentiality obligations.
- Integrations you enable. If your administrator connects a third-party service (such as QuickBooks Online or Sage), we exchange the data required for that integration, as described above.
- Legal requirements. We may disclose information if required by law, or to protect the rights, safety, or property of CloudAgg, our customers, or others.
- Business transfers. If CloudAgg is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
5. Security
We take the security of your data seriously:
- All traffic between your browser and the Service is encrypted in transit using TLS.
- Sensitive credentials, including integration tokens, are encrypted at rest.
- Each customer's data is isolated at the database level, enforced on every query — one customer can never see another customer's records.
- Access to production systems is restricted to authorized personnel who need it to operate the Service.
No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard practices and to notify affected customers promptly if a breach involving personal information occurs.
6. Data retention
We keep Customer Data for as long as your company maintains an active subscription. After termination, we make your data available for export and then delete it from active systems within a commercially reasonable period, except where retention is required by law. Contact and demo-request information is kept only as long as needed to follow up and maintain our business records.
7. Your rights and choices
Depending on where you live — including under Canada's PIPEDA and applicable U.S. state privacy laws — you may have the right to access, correct, delete, or receive a copy of your personal information. To exercise these rights, email us at info@cloudagg.com. If your personal information is held in a CloudAgg account managed by your employer, we may direct your request to that account's administrator, since they control that data.
You can opt out of marketing emails at any time using the unsubscribe link in the email; service communications (such as invoices and security notices) are sent as long as you have an account.
8. Children
The Site and the Service are business tools intended for adults. They are not directed at children under 16, and we do not knowingly collect personal information from children.
9. International transfers
We operate in the United States and Canada, and information may be processed in either country. Wherever your information is processed, it is protected as described in this policy.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we will update the “Last updated” date above and, for significant changes affecting the Service, notify customer administrators. Continued use of the Site or the Service after changes take effect means you accept the updated policy.
11. Contact us
Questions about this policy or about your data can be sent to info@cloudagg.com. We have teams in Toronto, Ontario and Dallas, Texas, and respond to privacy inquiries promptly.