Privacy Policy

Duxer Cloud is operated by Duxer Limited, a company registered in England and Wales. We act as the data controller for personal data you provide via this website (duxer.cloud), and as the data processor for personal data your operation uploads into a provisioned Duxer Cloud tenant. For all privacy enquiries email privacy@duxer.cloud.

When you contact us via duxer.cloud we collect:

• Company name, your name, and email address
• Optional phone number and operation details
• Any information you choose to include in the message field or attached files
• Technical metadata (IP address, user agent, request timestamp) used for spam prevention and abuse mitigation

When your operation uses a provisioned Duxer Cloud tenant, the data your operators upload (client records, asset records, project documents, ESG reports, audit trails) is held in infrastructure isolated to that tenant. Your tenant data is not co-mingledwith any other tenant's.

We do not access, sell, or share tenant data except: (a) where strictly necessary to provide, maintain, or support the service; (b) where you have asked us to (e.g. debug support); or (c) where compelled by law.

Marketing-website data is used to respond to enquiries about Duxer Cloud and to communicate with you about your account. We do not use this data for behavioural advertising, retargeting, or sale to third parties.

Tenant data is processed only to deliver the contracted service — run the platform, generate reports, send compliance submissions, respond to operator actions.

We process personal data under the following bases:

• Performance of a contract — operating your tenant under the Master Services Agreement.
• Legitimate interests — fraud prevention, site security, service improvement.
• Consent — marketing communications, where applicable.
• Legal obligation — accounting, tax, and other statutory requirements.

Contact submissions: 24 months unless you ask us to delete them sooner.

Tenant data: retained for the duration of your subscription plus a 30-day grace period after termination, during which you can export. After 30 days, tenant data is destroyed in line with the Master Services Agreement.

Billing and accounting records: 7 years, to comply with UK tax and accounting law.

Under UK GDPR you have the right to access, correct, delete, restrict, object to processing of, or port your personal data. To exercise any of these rights, email privacy@duxer.cloud. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

We use a small set of trusted infrastructure providers to deliver Duxer Cloud. Each is bound by a Data Processing Agreement and compliant with UK GDPR:

• Google Cloud Platform — compute (Cloud Run), container registry, secret management. Region: europe-west1 (Belgium).
• Neon — managed PostgreSQL database.
• Firebase (Google) — authentication, file storage.
• Vercel — marketing site hosting.
• Cloudflare — DNS and edge.
• Anthropic — AI executive summary generation for ESG reports. Tenant data passed for summary generation is not used to train models.
• Email delivery — transactional email provider (Resend or SendGrid).

We'll give you 30 days' notice of any new sub-processor that handles personal data, via the email on your account.

Production tenant data is held in the UK / EU (Google Cloud europe-west1). Some sub-processors (Anthropic, Vercel, Cloudflare) may process metadata in the United States under UK-approved transfer mechanisms (UK International Data Transfer Addendum / Standard Contractual Clauses).

The marketing site uses no third-party advertising cookies. The dashboard uses essential cookies for authentication and session management only. Analytics, if enabled, is anonymised and cookie-less.

Material changes to this policy will be announced by email to account contacts at least 30 days before they take effect. Minor clarifications may be made without notice; the “Last updated” date at the top of this page always reflects the latest revision.

Privacy enquiries: privacy@duxer.cloud.
General enquiries: hello@duxer.cloud.