Cloudsoft Technology Ltd. (hereinafter referred to as "the Company") is committed to protecting your privacy. The Company recommends that you carefully read this Privacy Policy to understand how we collect, use, and protect your personal information.
We collect personal information in the course of operating CoSecHK so we can deliver the Services, maintain security, comply with legal obligations, and improve user experience. The categories of data we may collect include:
We process this information to deliver the Services you request, administer your account, provide technical support, monitor service performance, detect and prevent abuse, comply with legal obligations, and develop new features.
If you choose to connect a third-party cloud storage service (such as Google Drive) to CoSecHK, we will request only the access scopes necessary to create, store, and manage the documents you explicitly select. Depending on the actions you take, we may process:
In response to your instructions, the Services may create, upload, edit, move, copy, download, convert, or delete files and folders within the locations you authorize. Any temporary copies cached to complete these operations are automatically purged once processing is finished, unless longer retention is legally required.
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop unrelated features, for advertising, or for human-readable processing except when required for security, to comply with the law, or when you grant explicit consent.
You may revoke CoSecHK access to your Google account at any time by visiting https://myaccount.google.com/permissions. If you disconnect the integration, we will delete the associated access tokens and cease processing data from that account.
If you use the optional Third-Party Company Reference Features (as described in our Terms of Use), we may process the following categories of information in order to provide the Features, calculate usage fees, prevent abuse, maintain audit records, and comply with legal obligations:
We process this information to deliver the Features you request, operate billing and fair-use controls, secure the Services, and meet record-keeping or legal requirements. The Features rely on third-party commercial data providers. Those providers process queries and return data under their own terms; we do not control the completeness or accuracy of their datasets.
Where the returned information includes personal data, you acknowledge that you determine the purposes of using such data for your client work, and you are responsible for ensuring that your collection and use comply with applicable privacy and data-protection laws (including the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and, where applicable, laws of relevant jurisdictions). We retain Feature-related logs and cached reference data only for as long as reasonably necessary for the purposes above, subject to longer retention where required by law or for dispute resolution.
If you use the optional AI Document Import Features (as described in our Terms of Use), we may process the following categories of information in order to provide the Features, prevent abuse, maintain audit records, and comply with legal obligations:
To operate the Features, uploaded content is transmitted to third-party AI service providers engaged by us, including but not limited to Alibaba Cloud Computing Co., Ltd. (阿里云计算有限公司) and its affiliates providing Alibaba Cloud Model Studio / DashScope and related AI model services, and such other AI providers as we may use from time to time. Those providers process the content under their own terms and infrastructure. We do not control their systems in full, and we cannot guarantee that unauthorised access or leakage will never occur on third-party platforms.
Where uploaded materials include personal data, you acknowledge that you determine the purposes of uploading and using such data for your client work, and you are responsible for ensuring that your collection and use comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and other applicable laws. We retain Feature-related uploads, extractions, and logs only for as long as reasonably necessary to provide the Features, secure the Services, bill or meter usage where applicable, and meet legal or dispute-resolution requirements.
Where required by applicable data protection laws, we rely on the following legal grounds to process your personal information:
We do not sell your personal information. We may share personal data only in the circumstances described below:
We retain personal information for as long as necessary to provide the Services, fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer need the information, we will delete or anonymize it, unless retention is required by law.
We implement administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your personal information and Client Data. These safeguards include, among others:
Where Client Data stored in the Services contains personal data of your clients or of other individuals, and you determine the purposes of collecting and using that personal data, you are the data user and the Company is the data processor under section 2(1) of the Personal Data (Privacy) Ordinance (Cap. 486). The Company is the data user in respect of account, billing, and support contact details, and in respect of limited technical and security logs of use of the Services. The division of those roles, the Company's undertakings as data processor, the location of off-site database backups, and your responsibility for any further forwarding after you send a file or a link to your own client, are set out in Section 9 of the Terms of Use. If there is any inconsistency, Section 9 of the Terms of Use prevails.
The Company's current off-site repository for operational database backups is a private object-storage bucket in the Hong Kong Special Administrative Region. Backup objects uploaded to that repository are encrypted by the Company before upload. This describes those backup copies only, and not the location of every system used to operate the Services or of every optional third-party feature.
For documents stored in your own Google Drive or another third-party service, their security measures also apply. We encourage you to review the relevant provider's documentation and configure sharing permissions appropriately.
CoSecHK is operated from Hong Kong. Depending on your location and the location of our service providers, your personal information may be processed in jurisdictions that may have different data protection laws than your home jurisdiction. We take appropriate measures to ensure that any cross-border transfers comply with applicable legal requirements.
Off-site copies of operational database backups uploaded by the Company are stored in Hong Kong, as stated in the Data Security section of this Privacy Policy. Other processing, including optional features that you choose to enable, may take place elsewhere as described in this Privacy Policy.
If you use the Third-Party Company Reference Features, query requests and related reference data may be transmitted to or processed by third-party providers operating in various jurisdictions. By using those Features, you instruct us to transmit the necessary query parameters to such providers for the purpose of returning the requested reference results.
If you use the AI Document Import Features, uploaded document content and related extraction requests may be transmitted to or processed by third-party AI providers operating in various jurisdictions (including mainland China and/or other regions where those providers host their models). By using those Features, you instruct us to transmit the necessary content to such providers for the purpose of returning extraction results.
Subject to applicable laws, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, and to request data portability.
You can exercise these rights by contacting us using the details below. We may need to verify your identity before fulfilling your request, and we may retain information where required by law.
You may manage email communication preferences in your account settings or by following the unsubscribe instructions in our emails. To revoke CoSecHK access to Google Drive or other integrations, use the provider's security settings (for Google, visit https://myaccount.google.com/permissions).
We use cookies and similar technologies to provide and enhance the Services, remember your preferences, authenticate sessions, and analyze usage patterns. Cookies are small text files stored on your device.
You can control cookies through your browser settings and other tools. If you disable certain cookies, some features of the Services may not function properly.
To help protect the Services against bots, automated abuse, and fraudulent submissions (for example on login, registration, and related forms), we use Cloudflare Turnstile, a security service provided by Cloudflare, Inc. Turnstile may operate in a managed or invisible mode. In invisible mode, verification may occur without a visible challenge widget on the page.
When Turnstile runs, Cloudflare may process limited technical signals such as IP address, TLS fingerprint, browser User-Agent, and related site/origin information, solely for distinguishing human users from bots and protecting the website. Cloudflare states that it does not use these signals to directly identify individuals. Further details are set out in Cloudflare's Turnstile Privacy Addendum, which supplements Cloudflare's Privacy Policy and is incorporated by reference into this Privacy Policy for the purpose of explaining Turnstile-related processing.
We use Turnstile only for security and abuse-prevention purposes described above, and not for advertising. Your use of forms protected by Turnstile is also subject to Cloudflare's applicable terms and privacy notices. If you have questions about Cloudflare's processing of Turnstile data, you may contact us using the details below, and we will assist where appropriate or direct you to Cloudflare's privacy contacts.
We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable laws. When we make material changes, we will post the updated policy on this page and update the “Last Updated” date below. We may also provide additional notice if required.
If you have any questions or comments about this Privacy Policy or our data handling practices, please contact us.
Cloudsoft Technology Limited
Email: [email protected]
Last Updated: November 01, 2026