Privacy Policy

What We Collect

To help you manage your cloud costs, we collect:

• Your email address and name (so we can identify your account)
• Cloud account credentials you provide (encrypted and stored securely)
• Cloud resource and cost data from your connected accounts
• Organization structures and allocations you create in our platform
• If you run our AI proxy: which AI coding tool and model was used, the tokens it spent, and the repository the work belonged to

If You Use Our AI Proxy

Our AI proxy measures what your AI coding assistants spend, so you can attribute that cost to the team or project it came from. Because this involves your source code, it is worth being precise about what does and does not leave your machine.

Your prompts and your code stay local. The proxy keeps an archive of your AI conversations on your own machine so you can audit it. That archive is never sent to us. What we receive is a periodic summary: token counts, the model and tool used, your machine's hostname and username, and a repository identifier.

The repository identifier is a name, not a path. We send a canonical form such as github.com/your-org/your-repo, read from your local git configuration. We deliberately do not send file paths, because a path usually contains a username and often a client or product name.

You can turn this down or off. Set RCC_REPO_ATTRIBUTION=hash to group usage by repository without telling us any repository names, or RCC_REPO_ATTRIBUTION=disabled to send no repository information at all. Attribution is on by default because it is what makes the cost reports useful.

We Do Not Sell Your Data

Let's be clear: we do not sell, rent, trade, or share your data with third parties for their marketing purposes. Your cloud cost data, resource information, and organizational structures are yours. We use this data only to provide you with our service.

When You Leave, Your Data Goes Too

If you decide to cancel your account, we delete all your data. This includes your cloud account connections, resource inventories, cost records, organizations, users, and everything else associated with your tenant. We don't keep backups of your data after deletion. When you're gone, you're gone.

How We Protect Your Data

We take security seriously:

• All data is encrypted in transit (HTTPS) and at rest
• Cloud credentials are encrypted with industry-standard encryption
• We use OAuth for authentication - we never see or store your password
• Each tenant's data is isolated from other tenants
• We regularly review and update our security practices

Cookies

We use cookies to keep you logged in and remember your preferences. We don't use tracking cookies for advertising. We don't sell cookie data to anyone.

Third-Party Services

We use a few third-party services to run our platform (hosting, payment processing, email). These providers only receive the minimum information needed to perform their service, and they are contractually obligated to protect your data.

Changes to This Policy

If we make significant changes to this policy, we'll notify you by email before the changes take effect. We won't suddenly start selling your data or change our deletion practices without telling you first.

Questions?

If you have questions about this privacy policy or how we handle your data, email us at privacy@reducecloudcosts.com