Privacy notice

SMS phone verification

CloudWLC, operated by Optaro ApS, uses user-requested SMS codes to verify possession of a mobile phone and associate that number with a registered CloudWLC account. This is an account verification service, not a marketing subscription.

We process your mobile number, account identifier, verification requests and verification status to provide this service and protect accounts against abuse. Vonage and the telecommunications providers involved in delivery process the phone number and message information needed to deliver your requested code. Delivery may involve providers outside the European Economic Area.

Mobile information and SMS opt-in consent will not be shared with third parties or affiliates for marketing or promotional purposes. We do not sell this information.

Verification codes expire after 10 minutes. Code expiry is not a promise that every associated record is deleted at that time. The verified phone number remains associated with your account; contact us to request correction or deletion of your personal information.

SMS terms · Contact CloudWLC support

Who we are

CloudWLC is a service operated by Optaro ApS, Tysklandsvej 7, 7100 Vejle, Denmark, CVR 46422678 (“Optaro”, “we”). Optaro is the data controller. This notice covers the CloudWLC marketing website at cloudwlc.com, the CloudWLC portal, and the CloudWLC read-only collector Chrome extension.

What this website collects

• Contact form: your name, work email address, organisation, approximate access point count, number of sites and any message you choose to write. We ask you not to include passwords, API keys or configuration files.
• Technical data: standard web server logs, such as IP address, browser type and the pages requested, kept for security and troubleshooting. IP addresses are also used briefly to limit repeated form submissions.
• Early-access sign-up: the same contact details, the platform you run, the approximate size of your estate and the plan you are interested in. We use these to set up your early access and to email you about the launch and your account. Product news is only sent if you tick the box asking for it.
• Analytics, only if you allow it: when you choose “Allow analytics”, we record visits, pages viewed, scroll depth, button clicks, form steps (never what you type), active time and a privacy-filtered replay of page use, against random identifiers kept in your browser's storage. Contact and early-access forms are excluded from replay, input values are masked, and query strings are removed from captured replay URLs. We do not use cookies or advertising trackers. You can change your mind at any time from “Analytics choices” in the footer, which stops collection and deletes the identifiers.
• Portal diagnostics, only if you allow it while signed in: we associate a session with your internal CloudWLC user identifier so support can find the affected journey, and record safe page names, bounded error codes and a privacy-filtered replay. Every portal text node and input is masked in replay. Passwords, Wi-Fi settings, exported configuration, customer names and request contents are not recorded. Choose “Privacy & diagnostics” in the portal footer to change your choice and stop collection.

What the CloudWLC collector extension handles

• CloudWLC connection: your CloudWLC user identifier and email address, the workspaces available to your account, the workspace you select, connection timestamps and token expiry. Account and workspace metadata are stored locally in Chrome until you disconnect or remove the extension. The access token is held only in Chrome session storage and is cleared when you disconnect or the session ends; it is not placed in persistent local storage.
• Cambium Cloud configuration: only after you invoke the extension on your signed-in Cambium Cloud account, confirm the source account and start collection, it reads supported Wi-Fi profiles, AP groups, sites, enterprise access point inventory and cnMatrix switch inventory from that active account. Provider exports can contain network and site identifiers, location details, Wi-Fi passphrases, RADIUS shared secrets and device or administrator credentials.
• The extension does not read or send your Cambium password, cookies, browser session tokens or browsing history. It does not monitor unrelated pages or change network settings.
• The collected source bundle stays in memory while you review it. It is not saved in extension storage. The extension has no local export download. It sends the exact bundle only after you explicitly approve the sensitive-data transfer to the named CloudWLC workspace.

How we use it

We use contact form details to reply to your enquiry and to discuss CloudWLC with you. Sending an enquiry does not subscribe you to marketing. Our lawful basis is our legitimate interest in responding to people who ask us about the service, and taking steps at your request before entering into a contract.

We use configuration sent through the collector to analyse and prepare the migration requested for your selected CloudWLC workspace, carry out migration actions separately approved in the portal, and provide an export if you separately request one. The collector requires a separate approval for the sensitive-data transfer and binds that approval to the exact bundle and destination workspace. We do not use collector data for advertising, lending or an unrelated purpose. Use and transfer of data received through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Who we share it with

Enquiries, sign-ups and their attribution are held in Optaro's own customer platform (Optaro Core). Consented website analytics and portal diagnostics are processed for us by PostHog using its European Union cloud region, so we can understand journeys, diagnose failures and improve usability. This website and the CloudWLC portal are hosted with Hetzner in the European Union. We do not sell personal data.

A collector bundle is transferred only when you approve sending it to the named CloudWLC workspace. It is processed by CloudWLC and the infrastructure providers that operate the service for us. We do not disclose it to advertisers or data brokers.

How long we keep it

We keep enquiries for as long as needed to deal with them and to maintain a record of our conversation with you, and then delete them in line with our retention schedule.

The extension does not persist the raw collected bundle. When you send a bundle, CloudWLC encrypts the source bundle at rest. The standard source-retention window is up to seven days from upload; eligible completed bundles may remain available within that window for a separately purchased portal export. Starting the separate paid-export checkout can extend encrypted source retention for up to 30 days from that request. Expired sources become unavailable and are removed by cleanup; other terminal outcomes can remove them earlier. Safe parsed migration data and audit records may remain in your selected workspace so you can review and complete the migration. A copy obtained through the separate portal export service remains under your control. Disconnecting or uninstalling the extension does not delete data already sent to your workspace.

Your rights

You can ask us for a copy of your personal data, ask us to correct or delete it, or object to how we use it. You also have the right to complain to a data protection authority: in Denmark, where Optaro is established, that is Datatilsynet; you may also contact the authority in your own country, such as the Information Commissioner's Office in the UK.

To exercise any of these rights, contact us using the form on this site.