Privacy policy
Your data. Your rules.
Last updated · 6 June 2026
We try to write privacy policies the way we'd want to read them — plainly, with no buried clauses. This document explains what we collect, why, where it lives, and how to get it deleted.
Summary
- We collect the minimum required to operate Cloud Office.
- Your documents and files are encrypted in transit and at rest.
- We don't sell your data. We don't train models on your content.
- You can export everything and delete your account at any time from Settings.
What we collect
Account information
Your name, email address, password hash (argon2, never the plaintext), the date you created the account.
Content
The documents, files, notes, to-dos, and contacts you create or upload. We treat this as private to you and never use it for anything other than serving it back to you.
Operational data
Session tokens for sign-in, IP address at sign-in for security logging, and basic request logs for debugging. We do not run advertising trackers.
What we don't collect
- We don't place any third-party advertising cookies.
- We don't analyse the content of your documents.
- We don't train AI models on your content.
How we use it
- To run the service: rendering documents, syncing edits, serving files.
- To keep your account safe (rate-limiting, anomaly detection on sign-ins).
- To answer your support requests.
- To send you essential service emails (sign-up confirmations, security alerts). Marketing emails require explicit opt-in.
Where your data lives
Account data, document metadata, and the encrypted contents of your files live on Ughoron-managed infrastructure (Appwrite on dedicated servers in our control). Real-time collaboration state is held in memory on a Hocuspocus server and periodically persisted to the same store.
Sharing
We share data only in these cases:
- With you, when you ask. When you create a public share link for a file, anyone with that link can view (and only view) it, until you turn it off.
- With service providers. Infrastructure providers (hosting, email delivery) under strict data-processing agreements.
- If the law requires it. Lawful court orders or government requests, scoped to the minimum required.
We do not sell your data. Ever.
Your rights
You have the right to:
- Access your data — download everything from Settings.
- Rectify incorrect information — edit your profile in Settings.
- Delete your account — Danger Zone in Settings, immediate and irreversible.
- Object or restrict certain processing — email us at privacy@ughoron.com.
- Lodge a complaint with your local data-protection authority.
Retention
Account data and content are kept for the lifetime of your account. When you delete your account, content is purged within 30 days. Backups roll off within 90 days.
Security
Passwords are hashed with argon2. Sessions are httpOnly, sameSite=lax cookies. All traffic is HTTPS only. File storage uses encryption at rest. We use isolated databases per environment and least-privilege API keys.
If you believe you've found a security issue, please email security@ughoron.com.
Changes to this policy
We'll update the “last updated” date at the top whenever this policy changes. Material changes will be announced via email to all account holders 30 days before they take effect.
Contact
Privacy questions: privacy@ughoron.com.
Data Protection Officer: dpo@ughoron.com.