Legal

Privacy Policy

What we collect, what we don't, and who answers for what.

The short version

CloudLink Capital sells software to registered investment advisers. That gives us two very different relationships with data, and this policy keeps them separate:

The rest of this page is the detail.

1. Who we are

CloudLink Capital Corporation ("CloudLink," "we," "us") is a Massachusetts corporation that builds a governed data and workflow platform for registered investment advisers. We are not an investment adviser, we do not provide investment, legal, tax, or accounting advice, and we do not take custody of client assets.

For privacy questions, contact support@cloudlinkcapital.com.

2. Two roles, two sets of rules

Most privacy policies describe one relationship. Ours describes two, and the distinction matters because it determines who you should ask about your own information.

ContextOur roleGoverned by
Our website, marketing, and business contacts We decide how the information is used This policy
An advisory firm's client information inside our platform We act only on the firm's instructions, as its service provider Our data processing agreement with that firm

If you are a client of an advisory firm that uses CloudLink: your adviser, not CloudLink, is the right point of contact for questions about your information, requests to access or correct it, or requests to delete it. We are contractually required to help your adviser answer you, and we will — but the relationship, and the decision, belongs to them. Please contact your adviser directly.

3. Information we collect through this website

What you give us

If you submit our contact form, we receive the information you enter — typically your name, email address, firm name, firm size, and your message. We use it to respond to you and to follow up about CloudLink. That's it. We do not add you to unrelated marketing lists, and we do not sell or share it with anyone for their own marketing.

What is collected automatically

Our hosting provider records standard server and security logs, including IP address, timestamp, requested page, referring page, and browser user-agent. These exist to serve the site, keep it available, and defend against abuse.

What we don't do

4. Service providers for this website

Three third parties can see website data, each for one narrow purpose:

ProviderPurposeWhat it sees
VercelWebsite hosting and deliveryServer and security logs, including IP address
FormspreeContact-form deliveryWhat you submit in the contact form
Google FontsTypeface deliveryIP address, when your browser requests a font file

Each acts on our behalf and is not permitted to use the information for its own purposes.

5. Advisory-firm client data inside the platform

When an advisory firm engages CloudLink, our platform reads data from systems the firm already uses — its CRM, portfolio accounting, financial planning tools, custodial data feeds, email, and calendar — into a data model that the firm owns. That data can include nonpublic personal information about the firm's clients.

We handle it under a written data processing agreement with the firm. Our commitments in that agreement include:

The authoritative version of these commitments is the executed agreement with the firm, not this page. Firms and their compliance officers can request our data processing agreement, security architecture, written information security program, and sub-processor register at support@cloudlinkcapital.com. Our Security & Trust page answers the standard due-diligence questionnaire.

6. How long we keep things

Contact-form submissions and business correspondence: as long as needed for the business relationship, and then as needed for our records. Server and security logs: a short rolling window, then discarded. Advisory-firm client data: for the term of the agreement with that firm, then exported and deleted per that agreement and the firm's instructions.

7. Security

We encrypt data in transit and at rest, hold per-firm encryption keys in a managed key service, enforce least-privilege and time-bound access for our own personnel with multi-factor authentication, log administrative access, and maintain a written information security program. Our security architecture is documented and available to prospective customers under a confidentiality agreement.

No system is perfectly secure. We will not claim otherwise.

8. Your choices

For information you have given us through this website, you may ask us to provide a copy of it, correct it, or delete it. Email support@cloudlinkcapital.com and we will respond as required by applicable law. Depending on where you live, you may have additional rights; we honor those that apply to us, and we do not discriminate against anyone for exercising them.

For information held inside an advisory firm's environment, please contact that firm. See section 2.

9. Other things worth stating plainly

Children

This website and our platform are for business use. We do not knowingly collect information from children through this website.

Where data is held

We are a United States company and store data in the United States by default. Platform data residency is configurable by contract.

Links to other sites

Where we link out, that site's privacy practices are its own.

10. Changes to this policy

If we change this policy we will update the date below. Where a change materially affects how we handle advisory-firm data, the notice provisions in our agreement with that firm govern, and we will notify the firm directly rather than relying on a website update.

Last updated: 27 July 2026

11. Contact

CloudLink Capital Corporation
20 Corporate Drive
Burlington, MA 01803
United States
support@cloudlinkcapital.com