Privacy policy

1. Who we are and what this covers

This policy explains how Wisella AI LLC, a limited liability company organized under the laws of the State of New Mexico, United States, 1209 Mountain Road Pl NE #10198, Albuquerque, NM 87110, USA (wisellai.com), the company that makes and operates Clousd (“Clousd”, “we”, “us”), handles personal data when you visit clousd.com, create an account, use the dashboard, the cloud devices, the API, the MCP server, the Clousd Client application or the Clousd-hosted model, contact support, or deal with us as a partner. It also applies to people who are not customers: contacts we write to about partnerships, people who send us a message, and people who report abuse.

For your account, billing, security and the way you use the service, Clousd is the controller. For the content you put on your devices and the personal data of other people that you or your AI agents process through the service, you are the controller and Clousd is your processor, acting only on your instructions (section 3). If you are in the EU, EEA or UK, section 10 applies to you; if you are in the United States, section 11.

2. What we collect

• Account: email address, password (stored only as a hash), a name if you give one, two-factor secret and recovery codes if you enable them, language and notification preferences, team membership and roles, API keys you create, and the fact that you signed in with Google or GitHub (we receive your email and an account identifier from them, nothing else).
• Sign-up signals: the IP address at sign-up and the country, city and internet provider we look up for it, whether the address belongs to a VPN or hosting provider, the page that brought you to the site (referrer, campaign tags, ad click identifiers, partner code), and, on dashboard pages, the IP addresses the dashboard is opened from and a browser fingerprint hash. These are used only to limit free trials to one per person, prevent fraud and know which channels bring customers.
• Billing: balance, every charge, payment and refund, your plan and renewal dates, the payment reference from the payment processor (amount, date, payment method brand, last four digits), billing country and tax identifiers you give us. We never see or store full card or bank account numbers.
• Devices: the devices you create (model, Android version, region, network option, name), their state and running time, snapshots, stored copies and the technical information in section 3.
• Resources: the third-party account logins, passwords, one-time-code secrets, texts and media files you choose to store in the dashboard for devices and agents to use. Credentials are encrypted at rest (AES-256-GCM) and are released to a device only for the action you start.
• Activity: a log of what is done in your account: sign-ins (time, IP address, browser), devices started, stopped and deleted, screens opened, billing actions, API and MCP calls (key, time, device, action), ADB relay sessions, and agent runs with the steps taken.
• AI assistant and hosted model: your messages to the dashboard assistant and its answers, including which data it looked up; and for the Clousd-hosted model, technical request logs (section 5).
• Clousd Client: when you sign in to the desktop application we record the sign-in and an installation identifier so that you can see and revoke signed-in apps in Account → Security. Chats, screenshots and any model keys you enter stay on your computer unless you send them to a model provider.
• Support and contact: emails you send to support@ or receive from us (stored with attachments), messages sent through the dashboard Support page and the contact form (with the IP address and browser they were sent from, to stop spam), and abuse reports.
• Partners: if you join the referral program, your referral code, the visits and sign-ups attributed to it, your reward balance and the payout details you give us.
• Website visits: server logs with IP address, browser type, requested pages and time, and which buttons and links are pressed on our pages, kept for security, debugging and to see where people get stuck, and the cookies described in the Cookie Policy. We do not use analytics or advertising trackers.

3. Information from your devices

To keep devices running, bill correctly and investigate abuse, our systems generate technical information about each device: the Android system log of the device (the same log a developer sees with ADB), the domains the device resolved and the volume of traffic it sent and received, a journal of which network exit (IP address, provider, country) the device used and when, health checks, crash reports and screenshots used for the live view, for automatic checks and for agent runs you start. Our staff look at this information only to operate the service, to help you when you ask, to investigate a report of abuse or a security incident, or when the law requires it. We do not open your apps, read your messages or files, or browse your devices for any other purpose.

The contents of a device (apps, files, accounts, media, settings) are your content. We store and process it only to provide the service to you, as described in the Terms of service, and we do not use it for advertising, do not sell it and do not use it to train AI models. Where your content contains personal data of other people, you decide why and how it is processed and we follow your instructions as your processor; business customers are covered by our Data Processing Addendum, which includes the EU standard contractual clauses; a signed copy is available at legal@clousd.com.

4. Why we use it and on what basis

We do not require or knowingly collect special categories of personal data (such as health, religion or biometric data for identification). The fingerprint hash is a number derived from public properties of your browser; it is not used to identify you as a person, only to recognize that a browser already took a trial.

5. AI features

Dashboard assistant. The assistant in the dashboard is powered by AI; its answers are generated by a language model running on servers we operate. It can see a snapshot of your own account (devices, balance, settings) and, when you ask, the screen of your own devices, through a read-only key that is limited to your account. It cannot change anything. Each thing it looks up is recorded, and you can see it in the conversation. Conversations are stored with your account until you delete the account.

Clousd-hosted model. When you use the Clousd-hosted model from the Clousd Client, your prompts and the screenshots and UI trees of your devices are sent to servers operated by us and by our GPU infrastructure provider only to produce the response. We log the account, time, size and duration of each request and not its content; the content is not kept after the response is produced and is never used to train models.

Your own model provider. If you connect your own key for Claude, OpenAI or another provider, screenshots, UI trees, files and prompts are sent to that provider under your agreement with it. For that processing the provider is your processor (or an independent controller, depending on its terms), not ours.

6. Who we share data with

We share personal data only with the categories of service providers below, which process it on our instructions and for the purposes stated, with authorities when the law requires (section 17), with a buyer or successor if we sell or merge the business (with notice to you), and with your own team members and the partners you choose. We do not sell personal data and do not share it for advertising.

We list recipients by category. The names of the individual providers in each category are available on request at legal@clousd.com; business customers covered by our Data Processing Addendum are notified by email before a new sub-processor is added and may object.

7. International transfers

Clousd is a United States company. Our website, databases and device servers are located in the European Union (Germany, Finland and the Netherlands, see section 6), and our staff access them from the United States and other countries to operate the service. Some providers, such as the payment processor and sign-in providers, process data in the United States. Where personal data protected by the GDPR or UK GDPR is transferred to a country without an adequacy decision, we rely on the European Commission’s standard contractual clauses (Decision 2021/914) and the UK International Data Transfer Addendum, with supplementary measures where needed, or on the provider’s certification under the EU-US Data Privacy Framework. You can ask for a copy of the safeguards at legal@clousd.com.

8. How long we keep data

We may keep data longer where a legal claim, an investigation, a payment dispute or a legal obligation requires it, and we keep a record of accounts closed for serious abuse (email and network) to prevent their return.

9. Your rights

Whoever you are and wherever you live, you can:

• see and change your email, password, two-factor settings, signed-in apps and notification preferences in Account settings;
• see all billing records in Billing and download receipts;
• export your content from devices at any time (ADB, API, media library) and your account data on request;
• delete devices, stored credentials, media and the whole account yourself (Account → Delete account);
• ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict or object to its use, or to stop marketing emails, by writing to support@clousd.com from the email address of your account (or, for people without an account, with enough information for us to find and verify your data).

We answer within 30 days, or tell you if we need more time. We may ask you to confirm your identity first. You may use an authorized agent, who must prove the authorization. We do not treat you differently for exercising your rights. If you disagree with our answer, you may appeal by writing to legal@clousd.com; we answer the appeal within 45 days and tell you how to complain to a supervisory authority.

10. If you are in the EU, EEA or UK

The GDPR and the UK GDPR give you the rights of access, rectification, erasure, restriction of processing, data portability, objection (including an absolute right to object to direct marketing) and the right to withdraw consent at any time without affecting earlier processing. Where we rely on legitimate interests you may ask for our balancing assessment. You may lodge a complaint with your data protection authority; the list of EU authorities is at edpb.europa.eu, and in the UK the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to resolve your concern first.

11. If you are in the United States

In the terms used by US state privacy laws, we collect these categories of personal information: identifiers (email, account ID, IP address), customer records (billing details, payment references), commercial information (purchases and plan history), internet and network activity (activity logs, device logs, cookies), geolocation inferred from IP address (country, city), and the content you put on devices and in the dashboard. We collect them from you, from your use of the service and from the providers in section 6, for the purposes in section 4. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not knowingly collect personal information of consumers under 16.

You have the rights described in section 9: to know, access, correct, delete and port your data, and to appeal. Because we do not sell or share, there is nothing to opt out of; we nevertheless honor Global Privacy Control signals as a request not to sell or share. Do Not Track: our site does not track you across other websites, so it does not respond differently to Do Not Track signals; no third party collects personal information about your activity across sites through our pages. California residents may also request the categories of information disclosed to third parties for the third parties’ direct marketing purposes: there are none.

12. Automated decisions

Two decisions are made automatically. Whether an account qualifies for a free trial is decided from the signals in section 2 (network, VPN or hosting address, browser fingerprint, email). Our payment processor screens payments for fraud under its own rules and may decline a payment. Neither decision affects your ability to buy a plan with a verified payment method, and in both cases you can ask for a human review by writing to support@clousd.com. We make no other decisions about you by automated means that have legal or similarly significant effects.

13. Security and breach notification

Passwords are stored as salted hashes and sign-in is protected against brute force; two-factor sign-in is available and all traffic uses HTTPS. Devices are isolated from each other on separate network namespaces and storage; stored devices, snapshots and media are encrypted in transit and at rest in object storage; stored credentials are encrypted with a key kept separately from the database. Access to production systems is limited to the people who operate the service, by key-based access from named locations, and is logged; hosts are monitored for unauthorized changes. No system is perfectly secure. If we learn of a breach affecting your personal data, we notify you by email without undue delay and in any case within the time the law requires (for example 72 hours to the supervisory authority under the GDPR, and the periods set by US state breach laws), and we notify business customers for whom we act as processor so that they can meet their own obligations.

14. Children

The service is for adults. You must be at least 18 years old (or the age of majority where you live) to create an account. We do not direct the service to children and do not knowingly collect personal data from anyone under 16; if we learn that we have, we delete the account and its data. Parents or guardians who believe a child has an account can write to support@clousd.com.

15. Cookies and tracking

We set only our own cookies: a session cookie, a trusted-browser cookie for two-factor sign-in, sign-up and form protection, your language, a cookie that remembers your cookie choice, and, if you accept them, cookies that record which page or partner brought you to the site. There are no analytics, advertising or social-media cookies and no tracking pixels. The full list, with durations and your choices, is in the Cookie Policy; you can change your choice at any time with the “Cookie settings” link in the footer.

16. Emails we send

Service emails are part of the service and cannot be switched off while you have an account: sign-up confirmation, sign-in codes, password reset, receipts and renewal notices, low-balance, lapse and stop notices, security alerts, answers from support and team invitations. Notifications about events on your devices can be configured in Account → Notifications. We send marketing emails about new features and offers only where the law allows, with our postal address in the footer and a one-click unsubscribe. We also write to businesses, websites and partners about partnerships from hello@clousd.com; every such email can be declined with one reply and we do not write again.

17. Requests from authorities

We disclose personal data or content to law enforcement or other authorities only on a valid legal request that we are required to comply with (such as a subpoena, court order or warrant from a competent authority), after reviewing it, and limited to what the request covers. We notify the affected account holder before disclosure unless we are legally prohibited from doing so or notification would create a risk of harm, and in emergencies involving imminent danger to life we may disclose the minimum necessary without a request. Requests go to legal@clousd.com. We also report child sexual abuse material to the authorities as the law requires.

18. Changes

We may update this policy as the service and the law change. The date at the top shows the current version and the previous version is named next to it. For material changes we notify you by email and in the dashboard before they take effect; earlier versions are available on request.

19. Who operates Clousd

Clousd is a product of Wisella AI LLC, a limited liability company organized under the laws of the State of New Mexico, United States, 1209 Mountain Road Pl NE #10198, Albuquerque, NM 87110, USA (wisellai.com), which operates the service and is the merchant for every purchase. Merchant country: United States. Legal notices to us must be sent by email to the legal address below or by post to the address above.

• Support, billing, refunds and privacy requests: support@clousd.com
• Company, partnership and press inquiries: hello@wisellai.com
• Abuse reports and copyright complaints: abuse@clousd.com (see Report abuse)
• Legal notices and requests from authorities: legal@clousd.com

Last updated 9 November 2026. We reserve the right to change this document at any time. The current version is always published on this page with its date, and material changes are announced by email or in the dashboard before they take effect.