StormCloud requires the collection of personal information to provide better services to its users.

StormCloud uses this information to:

1. Offer tailored content
2. Protect StormCloud’s integrity
3. Improve services

The personal and employment data collected for StormCloud’s sponsored registration process is limited to the information necessary to validate the registrant’s identity as a legitimate and approved validating authority of the StormCloud community, the qualifications of entry into particular StormCloud Places, or to access specific information within StormCloud. This information is collected by authorized personnel.

StormCloud registration information is collected and stored, and may be shared for the sole purpose of processing and validating the registrant’s identity and ensuring the user’s relevance to a legitimate Place within StormCloud and/or the qualifications of entry into particular StormCloud Places. Additionally, limited amounts of data will be shared among authorized personnel supporting members of the StormCloud community for the purposes of site maintenance (administration) and for supporting collaboration (notifying users of other members in the community). Once a user has been successfully validated and accepted into StormCloud, the user may modify his or her profile to change, add, or delete all optional fields.

Information that is collected and stored on StormCloud from a new registrant includes:

• First Name
• Middle Name
• Last Name
• Suffix
• Nickname
• Email Address
• Authentication (TFA) Delivery Method
• Affiliation
• Agency/Company
• Organization
• Organizational Relation
• Functional Area
• Background Investigation Level
• Security Question
• Security Answer

Users may decline to provide their information, but by doing so, their application for access will be rejected and they will not be provided an account. The effectiveness of authentication and security protections are verified through audits of system operation and usage conducted by the StormCloud Security Assessment team. The privacy risk is also minimized by the system’s architecture which stores collected information as encrypted data in a single location or data repository. This structure reduces the risk to the data by minimizing its proliferation in multiple locations and systems.

StormCloud reserves the right to uphold the integrity of the StormCloud system, and by doing so may take any necessary actions to ensure a secure system and network. Users acknowledge that they have no expectation of privacy while using this system and consent to all activities being monitored, and that disciplinary actions may result from determination of any violations.