TRUST / THE CLOUD FORGE
Privacy Policy
Your learning work is private by default. You decide whether selected portfolio proof can be shared.
Updated 12 October 2026
1. About this policy
This policy explains how The Cloud Forge handles personal information when you use our website, cloud-security learning platform, AI features, payments, portfolios and support services. It describes the information involved, why we use it, when it is shared and the choices available to you. Learning work is private by default. This policy should be read alongside our Terms of Service and Cookie Policy.
2. Information we collect
Account information includes your name, email address, account identifiers, profile details, onboarding answers and learning-path preferences. Learning records include enrolments, progress, missions, drafts, submissions, evidence files or links, assessment results and AI coaching conversations. We also hold Forge Credit balances and ledger history, purchase records and transaction status, support/contact messages and related correspondence. Technical request information, service usage, security events and audit records help us operate and protect the platform. These can include timestamps, request identifiers, browser or device information and network information available to our infrastructure providers. We do not ask you to provide unnecessary sensitive information.
3. Evidence and learner content
Evidence and submissions are private by default and are used to support your learning, assessment and authorised review. Original evidence files are not automatically made public. Do not upload passwords, API keys, access tokens, cloud credentials, confidential customer information or content you are not authorised to process. Use sanitised or fictional examples where possible. You remain responsible for checking your uploads and any material linked from them. Contact us if you believe you have accidentally submitted sensitive information so we can review the appropriate response.
4. AI processing
When you deliberately request an AI-powered feature, relevant learning context and learner-provided content may be processed by an AI service provider to provide that functionality. This includes Kaffy AI Coach, evidence analysis and assessment. Relevant content can include your mission context, reasoning, selected evidence and previous work needed for the request. Hidden assessment internals are not provided to the learner-facing AI coach. AI output may be inaccurate, incomplete or uncertain; exercise judgement and use the available review process. Do not submit secrets or unauthorised personal information. The AI provider's applicable terms and safeguards also govern its processing.
5. Payments
Stripe processes USD payments and Paystack processes NGN payments through their checkout services. The Cloud Forge does not receive or store full card numbers, CVV or raw card credentials. Payment providers handle payment credentials under their own terms and privacy notices. We store payment references, provider status, currency, amount, purchased Forge Credit quantity and the settlement and audit records needed to fulfil purchases, prevent duplicate credits, investigate problems and handle disputes. Do not include full card details in a contact message; a transaction reference is normally sufficient to start an enquiry.
6. Service providers
We use service providers for authentication, database services and private evidence storage, application hosting and delivery, requested AI functionality, and transactional email and contact/support notifications. Stripe processes eligible USD payments and Paystack processes eligible NGN payments. Information needed for these functions may be processed by the relevant provider. Providers have their own terms, privacy notices and safeguards, and their legal roles can differ according to the service and circumstances. This describes their functions and does not claim that every provider has the same contractual or legal role.
7. Why we use information
We use information to provide accounts, deliver learning functionality, save work, track progression, assess submissions, provide AI features you request and fulfil purchases. We also use it for support, account recovery, fraud and security prevention, audit trails and platform reliability. Selected information supports portfolio publication when you choose to share. First-party operational records help us understand aggregate product health; advertising trackers are not installed. Financial and other records may also be used to meet applicable legal or accounting requirements. We do not sell learner evidence or contact messages as part of the service.
8. Portfolio sharing
Private portfolios are unavailable to public visitors. Unlisted portfolios can be viewed by anyone with the exact link, so treat that link as shareable rather than confidential. Public portfolios may be indexed by search engines. You deliberately select validated projects and eligible presentation material to publish, including optional demonstrated skills, scores and learner-reviewed summaries. Original private evidence files, account email, coaching history and assessment internals remain excluded. Review every selected summary for confidential information. Making a portfolio private withdraws application access, but external copies and search-engine caches may persist after withdrawal.
9. Security
We use reasonable safeguards including authentication, server-side authorisation, row-level access controls, private evidence storage, server-side payment verification and audit/security logging. Access to learner records is restricted according to ownership and authorised operational responsibilities. These measures reduce risk but cannot guarantee absolute security. Protect your password and recovery email, use trusted devices and remove secrets from evidence before uploading. Report suspected unauthorised access or disclosure to hello@thecloudforge.app without sending credentials or another person's private records.
10. Retention
We retain information where needed to operate the service, maintain learning and assessment history, investigate fraud or security incidents, fulfil purchases and address accounting, disputes or applicable legal obligations. The appropriate period depends on the record and its purpose; there is no single immediate-deletion rule for all data. Closing an account does not automatically erase financial, assessment, audit or security history. Privacy requests are reviewed for deletion, restriction or anonymisation where appropriate, alongside records that must remain. Provider backups, email records and legally required retention may follow separate schedules.
11. International providers
Our infrastructure and service providers may process information in countries different from where you live. Their locations, terms and safeguards depend on the provider and service used. International processing is subject to the applicable arrangements and legal requirements. Contact us if you need information about a particular processing activity. We do not promise that every record is stored only in your country or that all providers use identical safeguards.
12. Your choices and rights
You can update supported profile information, control portfolio visibility and use account data export where available in settings. Original evidence files can be downloaded separately from your private evidence library. Contact hello@thecloudforge.app for correction, access, account closure, deletion, other privacy requests or questions about processing. We may verify account ownership before acting and will explain relevant limitations, including financial or security retention. Your rights depend on applicable law and may include contacting the relevant privacy authority. Automatic immediate account deletion is not provided.
13. Children
The service is intended for users legally able to enter the applicable agreement and is not intentionally designed for children below the applicable digital-consent age. Do not create an account where you cannot lawfully use the service. If you believe a child has provided personal information in circumstances that require further protection, contact hello@thecloudforge.app so we can review the account and appropriate action.
14. Policy changes
We may update this policy as the service, providers or applicable requirements change. The updated date identifies the version published here. We will provide further notice where appropriate or required for a material change and request additional choices or consent where applicable. Review the current policy when deciding what information to submit or publish.
15. Contact
For privacy enquiries, correction requests, account closure or concerns about personal information, email hello@thecloudforge.app or use our Contact & Support page. Describe your request without sending passwords, API keys, payment-card credentials or unnecessary confidential information.