CloudSims
Draft for review. This document is a product-specific starting point and has not yet been reviewed by legal counsel. Have it reviewed before relying on it in production.

Privacy Policy

This policy explains how XAD Labs (“we”, “us”) collects and uses personal data when you use CloudSims and CloudSims Exams. Version 2026-07-24.

1. Who is responsible

XAD Labs (xadlabs.com) is the controller for account and website data. For assessments, the inviting organisation is the controller of the candidate data it collects, and we act as its processor — we handle that data on its behalf to run the assessment and produce the report.

2. What we collect

  • Recruiter accounts: the email address you sign in with, your organisation name, and your role within it.
  • Candidates: the name and email an organisation enters to invite you, and the identifier linking your assessment session to that invitation.
  • Gameplay: the decisions you make during a run (the command log), the resulting design, scores, and simulated metrics. For assessments this is tied to your invitation; for the free game it is an anonymous session.
  • Technical: a session cookie for authentication, and standard server logs. We do not use advertising or cross-site tracking cookies.

We do not ask for, and you should not enter, passwords, payment details, or government identifiers anywhere in the Service.

3. Why we use it

  • to run the simulation, score it server-side, and show you the result;
  • to let an inviting organisation review a candidate’s assessment and report;
  • to authenticate accounts and keep the Service secure and working;
  • to record your agreement to these documents when you accept them.

4. Processors and where data lives

We host application data with Supabase (Postgres, authentication, and storage), our infrastructure provider. Supabase processes data on our behalf under its own terms and security controls. We do not sell personal data, and we do not share it with third parties except processors like this that help us run the Service, or where the law requires it. Data may be processed in the region our infrastructure is hosted; international transfers, where they occur, rely on appropriate safeguards.

5. How long we keep it

  • Assessment data is kept for as long as the inviting organisation’s account is active, or until the organisation deletes it, whichever comes first.
  • Anonymous free-game runs are kept to operate the game and may be pruned over time.
  • We delete or anonymise data we no longer need for the purposes above.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. For assessment data, contact the organisation that invited you first (they are the controller); we will support them in responding. For account or website data, contact us using the details below.

7. Security

Access to data is enforced at the database with row-level security, scoring and answer keys never leave the server, and invitation links are single-use and time-limited. No system is perfectly secure, but we design to limit what any one session can reach.

8. Children

The Service is not directed at children and is intended for use by adults in a professional or educational context.

9. Changes

We may update this policy; material changes update the version above. Where we hold an account for you, we will make reasonable efforts to notify you.

10. Contact

Privacy questions or requests: zameer@xadlabs.com · XAD Labs, xadlabs.com.

Last updated 24 July 2026.