reCloud ("the service") is made by LineXa Consulting ("we"). This policy explains what the service stores about your cloud and about the people who use it, how long it is kept and who can see it.
The short version
- reCloud reads the description of your cloud resources, with one read-only account. It cannot read what is inside them: no bucket contents, secret values, table data or log contents.
- There is no key file. The service works with a one-hour token, and you end access with one command.
- Scan results are hosted in the European Union. When you disconnect a project, its data is deleted within 30 days.
- We do not sell your data and we do not use it for advertising.
What the service reads in your cloud
For each project you connect, the scan lists the resources and reads their configuration:
- Resources: virtual machines, disks, snapshots, IP addresses, databases, load balancers, buckets, clusters, networks and similar. For each one: its name, type, location, status, size, labels and how it is configured.
- Usage signals: metrics that show whether a resource is used, such as CPU load, and the recommendations your cloud provider already makes.
- Identity settings: service accounts, the roles granted in the project and who they are granted to. These can include the e-mail addresses of your own people and service accounts.
- Cost estimates: list prices applied to what the scan sees, until you connect your billing export.
It does not read the data inside your resources, it opens no database connection and it exports nothing. The custom role ReCloud scanner has 71 permissions and every one of them lists or describes a resource.
What the service stores about you and your team
- Workspace and users: the workspace name and address, and for each user a name, an e-mail address, a role, a password (stored as a hash, never in clear) and the time of the last sign-in.
- Sign-in records: sign-in attempts, to lock an account after repeated failures and to investigate misuse. They include the network address the attempt came from.
- Plan requests: when you choose a plan on this website, we record your name, e-mail address, company or workspace name, the plan and the network address of the request, so that we can answer you.
- Bills: the plan, the amount and the dates of each monthly bill. We do not hold card numbers.
- Support: what you write to us at support@linexa.eu.
What the service stores from the scans
- The latest scan and its history: for each project, the resources found, the findings, the score and the numbers shown in the trend.
- Project settings: the project identifier you entered, the name you gave it and the connection state.
Scan results are kept in a database of the service, hosted in the European Union.
How we use it
- To run the scans and show you the findings.
- To open and run your workspace, sign you in and keep it secure.
- To answer your requests and to send you the e-mails the service needs: your invitation, a reply to your plan request, bills and notices about the service.
- To improve the service, with figures that do not name you.
The legal bases under the GDPR are the performance of our contract with you, our legitimate interest in running and securing the service, and our legal obligations.
How long it is kept
- Scan data: while the project is connected. When you disconnect a project, its data is deleted within 30 days. When you delete your account, it is deleted at once.
- Workspace and user data: while your workspace exists. An owner can delete the workspace at any time in Settings, under Delete my account. Its projects, scan results, members, sessions and sign-in records are then deleted at once, and nothing can be recovered afterwards. We keep only what the law requires, such as bills.
- Bills: kept for the period required by French accounting law.
- Plan requests: kept as long as needed to answer you and open your workspace.
Who can see it
Your users see your workspace according to their role. LineXa staff can reach customer data only to run and support the service, and every change they make in the administration console is logged.
We use the service providers below to run reCloud. They process data only on our instructions. We do not sell, rent or share your data for their own use.
| Provider | What it does | Where |
|---|---|---|
| OVH SAS (Roubaix, France) | Hosts the service, its database and the scan results | France, European Union |
| Brevo (France) | Sends the e-mails of the service | European Union |
The same list is kept up to date in the Data Processing Addendum.
Cookies
The service uses one cookie, set when you sign in, to keep you signed in. It is needed for the service to work, so it needs no consent banner. This website does not use advertising cookies.
Your rights
You can delete your workspace and its data yourself at any time: an owner chooses Delete my account in Settings. You can also ask us to access, correct, delete, restrict or export the personal data we hold about you, and you can object to its use. Write to support@linexa.eu. If you are not satisfied with our answer, you can complain to your data protection authority; in France that is the CNIL.
For the personal data inside the scans, you are the controller and we are your processor: the Data Processing Addendum applies.
Contact
Questions or data requests: support@linexa.eu. The controller of the data described in this policy is LINEXA CONSULTING, a company registered in France under SIREN 107 250 946 (SIRET 107 250 946 00012, intra-EU VAT FR67 107 250 946), with its registered office at 4 Rue Lakanal, 78500 Sartrouville, France.