Privacy
Policy

SajiloCloud Technologies Pvt. Ltd. ("EasyCloud", "we", "our", "us") is a private limited company registered in Nepal (), operating from Kathmandu 44600, Nepal. We are the data controller for personal data processed through our website and cloud services.

For privacy enquiries, contact our Privacy Officer at legal@sajilocloud.com.np.

We collect the following categories of personal data:

• Account Data: Name, email address, phone number, company name, billing address, PAN/VAT number (where provided).
• Payment Data: Payment method type and last four digits. Full card numbers are processed by our payment processor (Stripe/eSewa/bank transfer) and are not stored by us.
• Usage Data: Service usage metrics, control panel activity logs, support ticket history, API access logs.
• Technical Data: IP address, browser type, device type, cookies, and session identifiers.
• Customer Content: Data you store on our infrastructure (files, databases, email). We do not access this data except for support purposes with your consent or where required by law.

We process your data for the following purposes and legal bases:

• Service Delivery (Contract): Provisioning and operating your cloud services, processing payments, sending service notifications.
• Account Management (Contract): Customer support, identity verification, billing management.
• Legal Compliance (Legal Obligation): Meeting obligations under Nepal's Electronic Transactions Act 2063, Individual Privacy Act 2018, and requirements of the Inland Revenue Department.
• Security (Legitimate Interest): Fraud detection, DDoS protection, abuse prevention, and infrastructure security monitoring.
• Marketing (Consent): Product updates, changelog emails, and promotional communications — only where you have opted in. Unsubscribe at any time.

All customer data and backups are stored exclusively on infrastructure located within Nepal. We do not transfer personal data outside Nepal except where explicitly required by your service configuration or instructed by you.

Our datacenters hold ISO 27001 and SOC 2 Type II certifications. Physical access is controlled via biometric authentication and 24/7 security.

We retain your data for as long as your account is active and for 7 years thereafter, as required by Nepal's financial record-keeping obligations under the Income Tax Act. Support ticket data is retained for 3 years. Server logs are retained for 90 days. You may request deletion of non-legally-required data at any time.

Under Nepal's Individual Privacy Act 2018 and applicable regulations, you have the right to:

• Access a copy of your personal data
• Correct inaccurate personal data
• Request deletion of data we are not legally required to retain
• Object to processing for marketing purposes
• Withdraw consent at any time (where processing is consent-based)
• Lodge a complaint with the National Information Commission of Nepal

To exercise these rights, email legal@sajilocloud.com.np. We respond within 30 days.

We use essential cookies for session management and authentication. We use analytics cookies (first-party only) to understand how customers use our control panel. We do not use third-party advertising cookies. You may disable non-essential cookies in your browser settings without affecting service functionality.

We share limited data with the following processors who are contractually bound to process data only on our instructions:

• Stripe: Payment processing (card data). Stripe's servers are outside Nepal — card data is processed under PCI DSS.
• Cloudflare: CDN and DDoS protection. IP addresses may be processed at Cloudflare edge nodes globally.

We do not sell your personal data to third parties.