Privacy Policy

1. Information we collect

We collect only what we need to run the service and to talk to you.

• Account details you give us at signup or through the contact form, such as name, work email, company, role, team size and approximate cloud spend.
• Cloud billing data from the exports you connect, such as AWS Cost and Usage Reports, Azure cost exports and the Google Cloud billing export.
• Usage metrics for cloud resources, such as CPU, memory, disk and network figures from CloudWatch, Azure Monitor and Cloud Monitoring.
• Resource metadata such as resource IDs, types, regions, tags and labels.
• Basic technical data when you use the website, such as browser type and pages visited, used to keep the site secure and working.

2. What we do not collect

The connection you grant is read-only and limited to billing, usage metrics and resource metadata. We do not read application data, database contents, files in storage buckets, secrets or customer records held in your cloud.

3. How we use information

• To produce your Spend Map, waste findings, rightsizing and commitment recommendations, budgets, alerts, chargeback statements and savings reports.
• To send login details, alerts and scheduled reports you have asked for.
• To answer questions and provide support.
• To improve detection models using aggregated, de-identified usage patterns. Your raw billing data is never shared with other customers.
• To send billing invoices and service notices.

4. We never sell your data

Billing and usage data is never sold, rented or traded. We do not use it for advertising, and we do not share it with third parties except the service providers listed below that help us run the service.

5. Service providers

We use a small number of providers for hosting, email delivery and payment processing. They process data only on our instructions and under written agreements that require them to protect it.

6. Security

• Data is encrypted in transit with TLS and at rest with AES-256.
• Access to customer data is limited to named staff who need it to deliver the service, and access is logged.
• Cloud connections use read-only roles that cannot change, stop or delete resources.
• Each customer workspace is logically separated from every other workspace.

7. Retention

Billing and usage data is kept for the history period of your plan while your subscription is active. When you close your account or disconnect a cloud account, related data is deleted within 30 days, except where we must keep invoices for tax and accounting law.

8. Your rights

You can ask to see, correct, export or delete the personal data we hold about you. You can also disconnect any cloud account at any time by removing the read-only role in your cloud console, which stops all further collection immediately.

9. Cookies

The website uses only the cookies needed for it to work, such as the session cookie used by the security check on our forms. We do not use advertising cookies.

10. Changes and contact

If we make a material change to this policy, we will tell account owners by email before it takes effect. For any privacy question or request, please write to us through the Contact us page.