CloudPeak Privacy Notice
Last updated: March 14, 2026. Governed by CCPA (California), VCDPA (Virginia), and GDPR + UK GDPR where applicable.
Who we are
CloudPeak Systems, Inc., a Delaware corporation with principal offices at 301 Congress Ave, Suite 1200, Austin, TX 78701 (the "Controller" under GDPR for marketing processing).
What personal data we collect
- Demo-request submissions — name, email, phone, company, title, industry, employee count, state/region, current-system answer, consent flag, IP, user-agent, timestamp.
- Call records — when Caleb calls you back, we record audio and produce a transcript. Retention: 90 days in Retell's storage; a derived text-only transcript is retained in our CRM for 24 months.
- Website analytics — page views, referrer, IP-derived country. We do not use third-party ad-tracking pixels. We do use first-party cookies for session continuity.
Why we process it
- To call you back in response to a demo request (lawful basis: prior express invitation / consent at submission).
- To run BANT qualification and book you with the right AE (lawful basis: performance of pre-contractual steps at your request).
- To send occasional CloudPeak product updates (lawful basis: legitimate interest; unsubscribe any time).
- To satisfy legal and regulatory obligations.
Automated decision-making
Caleb, our AI SDR, qualifies leads using a BANT rubric. The BANT score is deterministic (see /resources/roi-methodology for how we score). No decision Caleb makes has legal or similarly significant effect on you — at most, Caleb decides whether to schedule a follow-up with a human AE. You can always ask to speak to a human SDR by saying "Can I talk to a human?" on the call.
Who we share with
See /subprocessors for the full list. Highlights: AWS (hosting, US / EU / UAE regions by customer residency), Retell AI (voice call routing), Google (Gemini LLM for Caleb's conversation), HubSpot (CRM). We sign a DPA with every sub-processor.
International transfers
If you are in the EU/UK and you submit a demo request, your personal data may be processed in the United States. We rely on the EU-US Data Privacy Framework (where applicable) and on Standard Contractual Clauses where not. We can provide the SCCs on request.
Your rights
California: access, deletion, correction, opt-out of sale (we do not sell), and limit-use-of-sensitive-info. EU/UK: access, rectification, erasure, portability, restriction, objection, and the right not to be subject to solely automated decisions with legal effect. To exercise any of these, email privacy@cloudpeaksystems.com; we respond within 15 business days (and within 30 days for GDPR requests).
Data retention
Demo-request records retained for 24 months after your last interaction, then anonymised. Audio recordings: 90 days. Transcripts: 24 months. Audit logs: 7 years by default (customer-configurable down to 1 year).
Security
See /security. SOC 2 Type II, AES-256 at rest, TLS 1.2+ in transit, annual third-party pen test.
Changes
We notify customers of material changes via email 30 days before they take effect.
Contact
Privacy officer: privacy@cloudpeaksystems.com · 301 Congress Ave, Suite 1200, Austin, TX 78701.