CloudScrub Privacy Policy
Effective: August 23, 2026
广州市音菲尼科技有限公司, registered in Mainland China, provides CloudScrub and processes customer data as described in this policy. Contact luna.zheng@gzinfini.cn for privacy and data requests.
Data we process
We process Entra tenant and user identifiers, Azure Subscription IDs selected by the customer, resource metadata, cost and usage data, risk findings, operational audit records, Marketplace subscription status, and necessary diagnostic logs. We do not store user Azure OAuth tokens or process payment-card information.
Purposes
Data is used only for subscription fulfillment, cost analysis, sponsorship estimates, risk and waste detection, customer-approved governance actions, quota metering, support, security, and service improvement. Customers control their Azure data; CloudScrub processes it on their instructions. We do not sell customer data or use it to train publisher-owned models.
Hosting, sharing, and AI
The service uses Microsoft Azure managed identities, Cosmos DB, Storage, Service Bus, Application Insights, and optional Azure OpenAI. Access is limited to Microsoft cloud processors, authorized personnel necessary to provide the service, and legally required recipients. When name redaction is enabled, resource names are replaced with session-scoped placeholders before model processing. Customers may also configure their own Azure OpenAI resource.
Security and retention
We use encryption in transit and at rest, least-privilege RBAC, Key Vault, Front Door WAF, audit logging, and tenant isolation. Plan data is retained for the published period. Paid customers receive a 30-day full-export window after cancellation. Pro trial data is retained for seven days after cancellation and then deleted. Commerce, anti-fraud, and legally required audit records may be retained longer.
Your rights
A tenant administrator can download a complete streaming product-data export and request access, correction, restriction, or deletion through the email above. We verify the tenant and requester before acting.
Changes
Material changes will be announced on this page or in the product, with an updated effective date.
CloudScrub 隐私政策
生效日期：2026-08-23
CloudScrub 由注册于中国大陆的广州市音菲尼科技有限公司提供，并按本政策处理客户数据。隐私与数据请求请联系 luna.zheng@gzinfini.cn。
处理的数据
我们处理 Entra 租户、用户 Object ID/UPN、客户选择纳管的 Azure Subscription ID、资源元数据、费用与用量、风险发现项、操作审计、Marketplace 订阅状态和必要的诊断日志。我们不保存用户 Azure OAuth Token，也不处理银行卡信息。
用途
数据仅用于订阅履约、费用分析、赞助订阅估算、风险与浪费识别、客户确认的治理操作、配额计量、支持、安全防护和服务改进。客户是其 Azure 数据的控制者；CloudScrub 按客户指示处理数据，不出售客户数据，也不使用客户数据训练发布者自有模型。
存储、共享与 AI
服务使用 Microsoft Azure 托管身份、Cosmos DB、Storage、Service Bus、Application Insights 和可选 Azure OpenAI。仅 Microsoft 云处理器、提供服务所必需的授权人员及依法要求的接收方可获得最少数据。启用名称脱敏时，资源名称在发送给模型前以会话级占位符替代；客户也可配置自己的 Azure OpenAI。
安全与保留
我们采用传输与静态加密、最小权限 RBAC、Key Vault、Front Door WAF、审计和租户隔离。套餐数据按公开保留期保存。付费客户退订后有 30 天完整数据导出窗口；Pro 试用数据在退订后保留 7 天，随后删除。商业履约、反欺诈和依法必须保存的审计记录可能继续保留。
客户权利
租户管理员可下载完整的流式产品数据导出，并可通过上述邮箱申请访问、更正、限制或删除。我们会先验证租户及请求人身份，再处理请求。
变更
重大变更将在本页面或产品内通知，并更新生效日期。