Privacy Policy - Frust

Last updated: April 2025

1. Introduction

At Frust ("we", "our", "us" or "the Company"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, process, transfer, store, and share your personal data when you use our services, applications, or visit our website www.frust.co.

This policy has been designed to comply with applicable data protection regulations, including the General Data Protection Regulation (GDPR) where applicable. We recommend that you read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Data Provided by the Client

We may collect and process the following data that you provide to us:

Registration and account information: name, email address, phone number, position, company, and other information necessary to create and manage your account.

Billing information: banking information and billing address.

Communications: information you provide when communicating with our support team or responding to surveys.

Preferences: settings and preferences selected for our services.

2.2 Automatically Collected Data

When you use our platform or visit our website, we may automatically collect:

Technical information: IP address, device type, browser type, time zone, operating system, and technology used to access our platform.

Usage information: pages visited, time spent, browsing patterns, features used, and configuration preferences.

Metadata about cloud resources: instance types, configurations, consumption patterns, and other metadata related to your cloud infrastructure.

2.3 Data from Third Parties

We may receive information about you from public or commercial sources, including:

Cloud service providers (such as AWS, Google Cloud Platform, Microsoft Azure, among others): information about your cloud resource usage, commitments, and configurations.

Business partners and distributors.

Publicly available sources, when permitted by law.

2.4 What We DO NOT Collect

It is important to highlight that Frust does not access, collect, or process:

Content stored in your cloud instances or servers.

End-customer data stored in your infrastructure.

Source code, databases, repositories, or any other content stored in your cloud resources.

3. How We Use Your Information

3.1 Service Provision

Creating and managing your account.

Providing, personalizing, and improving our services.

Processing transactions and sending invoices.

Analyzing cloud resource consumption patterns to offer optimization recommendations.

3.3 Service Improvement

Conducting data analysis to improve our algorithms and services.

Resolving technical issues and diagnosing errors.

Researching usage trends to develop new features and services.

Creating aggregated and anonymized data for statistical analysis.

3.4 Security and Compliance

Verifying your identity and preventing fraudulent activities.

Protecting our systems, services, and users.

Complying with legal and regulatory obligations.

Enforcing our Terms and Conditions.

4. Legal Basis for Processing

We process your personal data according to the following legal bases:

Contract Performance: To provide you with our services according to the agreed Terms and Conditions.

Consent: For marketing communications or when your specific consent is required.

Legitimate Interests: To improve our services, ensure security, and prevent fraud, provided these interests do not override your rights and freedoms.

Legal Obligation: To comply with our legal and regulatory obligations.

5. Data Sharing and Disclosure

5.1 With Your Consent

We will only share your personal information with third parties when you have given us your explicit consent to do so. Your consent is our main priority before sharing any personal data.

5.2 Third-Party Service Providers

We may share your data with third parties that help us provide our services, including:

Hosting and cloud technology service providers.

Payment processors and financial services.

Analytics and marketing services.

Technical support and customer service providers.

These providers are contractually obligated to protect your information and may only use it according to our instructions.

5.3 Cloud Service Providers

To manage your commitments and optimize your resources, we may share information with cloud service providers such as AWS, Google Cloud Platform, Microsoft Azure, among others, including:

Account identifiers.

Usage patterns and resource metrics.

Information about financial commitments.

5.4 For Legal Reasons

We may disclose your information when necessary to:

Comply with applicable law, regulation, legal process, or governmental request.

Enforce our Terms and Conditions.

Protect our rights, property, or safety, or that of our users.

5.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or similar event, your information may be transferred or shared with third parties as part of that transaction, subject to confidentiality obligations.

5.6 SMS and messaging

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. International Data Transfers

Frust operates globally, and your data may be transferred and processed in countries outside your country of residence. We implement appropriate safeguards to ensure your data receives an adequate level of protection, including:

Standard contractual clauses approved by data protection authorities.

Privacy Shield certifications where applicable.

Data processing agreements with our providers.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction, including:

Encryption of sensitive data.

Role-based access controls.

Continuous security monitoring.

Regular security audits.

Security training for our staff.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

During the term of your business relationship with us.

The time required to comply with legal obligations.

To resolve disputes or enforce our agreements..

When your data is no longer necessary, we will securely delete it or anonymize it.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request information about the personal data we hold about you.

Rectification: Correct inaccurate or incomplete information.

Erasure: Request the deletion of your data (subject to certain exceptions).

Restriction: Limit the processing of your data in certain circumstances.

Portability: Receive your data in a structured and commonly used forma

Objection: Object to the processing of your data for specific purposes.

Withdrawal of Consent: Withdraw any previously given consent.

To exercise these rights, contact us using the information provided in section 15 of this policy.

10. Cookies and Similar Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. We use cookies and similar technologies (such as web beacons and pixels) to:

Maintain your session while using our services.

Remember your preferences and settings.

Understand how you interact with our website and services.

Improve and personalize your experience.

Analyze the performance of our website and services.

10.2 Types of Cookies We Use

Essential Cookies: Necessary for the basic functioning of the website.

Functionality Cookies: Enhance user experience by remembering your preferences.

Analytical Cookies: Help us understand how visitors interact with our site.

Marketing Cookies: Used to display relevant advertising and measure its effectiveness.

10.3 Cookie Control

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website and services.

11. Children's Privacy

Our services are not directed at individuals under 18 years of age, and we do not knowingly collect personal information from minors. If we discover that we have inadvertently collected personal information from a minor, we will take steps to delete such information.

12. Third-Party Links

Our website and services may contain links to third-party websites that have their own privacy policies. We are not responsible for the privacy practices or content of such sites.

13. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. Updates will take effect 30 days after their publication on our website. We will notify you of significant changes through a notice on our website or by email.

14. Compliance with Specific Regulations

14.1 European Union/EEA Residents

If you are a resident of the European Union or the European Economic Area, additional provisions apply:

The data controller is Frust, located at Americo Vespucio Nte, 2580, Santiago, Chile.

You may file a complaint with your local data protection authority if you are not satisfied with our response to your request.

14.2 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:

Requesting information about the categories of personal information we have collected or disclosed.

Requesting the deletion of your personal information.

Opting out of the sale of your personal information (please note that Frust does not sell personal information).

15. Contact

If you have questions, comments, or requests related to this Privacy Policy or the processing of your personal data, contact us at: privacy@frust.co.

We are committed to resolving any complaints about our collection or use of your personal data. If you believe we have not satisfactorily addressed your complaint or concern, please contact our privacy office.