Privacy Policy

Integral Cloud Solutions, LLC ("we", "us", "our") operates the website integralcloudsolutions.com, the Petrovascope mobile application, and related services. This Privacy Policy explains how we collect, use, and protect your information when you use our websites, applications, and services.

We take your privacy seriously. We collect only what we need, we don't sell your data, and we're transparent about how we use it. This policy applies to all users, including those in the European Economic Area (EEA), United Kingdom, Switzerland, and California.

Information We Collect

Information You Provide

• Contact form submissions — When you use our contact form, we collect your name, email address, company name, and the message you send. This information is processed by our own AWS Lambda function and delivered to us via Amazon SES. No third-party form services are used.
• Email notifications — If you sign up to be notified about Petrovascope, we collect your email address.

Information Collected Automatically

• Crash reports and error data — Petrovascope uses Sentry (sentry.io) for crash reporting and error monitoring. When the app encounters an error, Sentry collects device type, operating system version, app version, and technical details about the error. We have configured Sentry to exclude personal data, authentication tokens, and platform credentials from all crash reports. Sentry is GDPR-compliant and acts as a data processor on our behalf. Sentry's privacy policy: sentry.io/privacy
• Basic web analytics — Our website uses only essential cookies required for basic functionality. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics services that identify individual visitors. No cookie consent banner is required as we do not set non-essential cookies.

Information We Do NOT Collect

• We do not collect, store, or transmit your OSDU® Data Platform credentials, access tokens, or API keys.
• We do not collect, store, or access your subsurface data, well data, or any data retrieved from the OSDU® Data Platform.
• We do not track your location.
• We do not sell, rent, or share your personal information with third parties for marketing purposes.

Petrovascope Application

Petrovascope connects directly from your device to your organization's OSDU® Data Platform instance. All data communication happens between your device and your OSDU® Data Platform deployment — it does not pass through our servers.

Data Stored on Your Device

• Connection configurations — OSDU® Data Platform URLs, authentication provider URLs, client IDs, and realm names are stored locally on your device using the operating system's secure storage. These are never transmitted to Integral Cloud Solutions.
• Authentication tokens — Access tokens obtained during sign-in are held in memory only and are not persisted to disk. They are cleared when the app is closed or you sign out.
• Cached data — Search results and record data may be temporarily cached in memory for performance. This cache is cleared when the app is closed.

Third-Party Services in Petrovascope

• Sentry (sentry.io) — Crash and error reporting. Sentry's privacy policy: sentry.io/privacy
• OpenStreetMap — Map tiles for the Wells Map feature. OpenStreetMap's privacy policy: osmfoundation.org
• Your OSDU® Data Platform provider — When you connect to an OSDU® Data Platform instance, your data requests are sent directly to that platform. The data handling is governed by your organization's policies and your platform provider's terms.

CIButler and LeafPress

CIButler and LeafPress are open source command-line tools that run entirely on your local machine. They do not collect telemetry or transmit data to Integral Cloud Solutions. All communication is with infrastructure you configure — such as OSDU® Data Platform instances, Kubernetes clusters, or local Docker environments.

Website (integralcloudsolutions.com)

Contact Forms

Contact form submissions are processed by our own infrastructure on Amazon Web Services (AWS Lambda and Amazon SES). No third-party form processing services are used. We use the information you submit solely to respond to your inquiry.

Cookies

Our website uses only essential cookies required for basic functionality. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics services that identify individual visitors.

How We Use Your Information

We use the information we collect for the following purposes, each with a corresponding lawful basis under GDPR:

Purpose	Lawful Basis
Respond to inquiries and support requests	Contract performance / Legitimate interests
Improve products via crash reports and error data	Legitimate interests
Send product update notifications	Consent (opt-in only)
Comply with legal obligations	Legal obligation

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms given the limited and non-sensitive nature of the data involved.

Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Contact form submissions — retained for the duration of the business relationship, or up to 3 years from last contact if no engagement results
• Crash reports (Sentry) — automatically deleted after 90 days
• Notification email addresses — retained until you unsubscribe or request deletion

You may request deletion of your data at any time by contacting privacyREMOVE@integralcloudsolutions.com. We will action deletion requests within 30 days.

Data Security

We implement reasonable security measures to protect the information we collect. Our team members hold or have held prior U.S. Secret-level security clearances, and we apply security-first practices to all our systems and processes.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware, and affected individuals without undue delay, as required by applicable law.

International Data Transfers

Integral Cloud Solutions is based in the United States. If you are located in the EEA, UK, or Switzerland, your personal data may be transferred to and processed in the United States through our use of the following service providers:

• Amazon Web Services (AWS) — contact form processing and email delivery
• Sentry — crash reporting and error monitoring

These providers participate in the EU-U.S. Data Privacy Framework and have implemented appropriate safeguards for international data transfers. Where the Data Privacy Framework does not apply, we rely on Standard Contractual Clauses approved by the European Commission.

Petrovascope communicates directly between your device and your organization's OSDU® Data Platform instance — this traffic does not pass through our servers and is governed by your organization's own data transfer arrangements.

Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will promptly delete it.

Your Rights

You have the following rights regarding your personal data. Some rights apply to all users; additional rights apply to EEA, UK, and Swiss residents under GDPR.

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your personal data
• Restriction — Request that we limit processing of your data
• Portability — Receive your data in a structured, machine-readable format
• Object — Object to processing based on legitimate interests
• Withdraw consent — Where processing is based on consent, withdraw it at any time without affecting prior lawful processing
• Opt out of marketing — Unsubscribe from notifications at any time via the link in any email we send

To exercise any of these rights, contact us at privacyREMOVE@integralcloudsolutions.com. We will respond within 30 days. We will not discriminate against you for exercising your privacy rights.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know — Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to delete — Request deletion of your personal information
• Right to opt out of sale — We do not sell personal information, so no opt-out is necessary
• Right to non-discrimination — We will not deny services, charge different prices, or provide a different quality of service because you exercised your privacy rights

To exercise these rights, contact us at privacyREMOVE@integralcloudsolutions.com.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Integral Cloud Solutions, LLC
Greater Boston, MA
integralcloudsolutions.com/contact.html

For general inquiries: salesREMOVE@integralcloudsolutions.com
For privacy-specific requests: privacyREMOVE@integralcloudsolutions.com