Privacy Policy

Who we are

Cloud Spend Guard is operated by [COMPANY NAME AND LEGAL FORM], [REGISTERED ADDRESS], [COUNTRY] ("we", "us"). We are the controller of the personal data described in this policy. Contact us about privacy at privacy@cloudspendguard.com.

What we collect

• Account data: your email address and, if you sign in with Google, your name and profile picture.
• Workspace data: your Connections, the IDs of your cloud accounts, and what we read from them: resources, their configuration, names and tags, and their cost.
• Credentials: the tokens, secrets and keys you give us for Azure, Google Cloud and DigitalOcean, stored encrypted. MCP API keys are stored only as a hash.
• Sam: your questions and Sam's answers are sent to Amazon Bedrock to produce the answer. We do not store the conversation. We keep how much of the daily Sam allowance you used, for two days.
• Billing data: your plan and Stripe customer and subscription IDs. Stripe collects your payment details; we never see your card number.
• Emails you send us.
• Website visits: we count visits to this website with Cloudflare Web Analytics, which does not use cookies or track you across websites.
• Technical logs: request and error logs, which can include IP addresses, used to keep the service secure and working.

Why we use it

• To provide Cloud Spend Guard under our Terms of Service (GDPR Article 6(1)(b)).
• To keep the service secure, prevent abuse and fix problems, which is our legitimate interest (Article 6(1)(f)).
• To keep billing records required by law (Article 6(1)(c)).

We do not sell your data or use it for advertising.

Data in your cloud accounts

Resource names and tags in your cloud accounts can contain personal data. For that data you are the controller and we process it on your behalf, as described in our Data Processing Agreement.

Who we share it with

Only the providers that help us run the service, listed on our Subprocessors page. We may also disclose data when the law requires it.

Where it is stored

Our service runs on Amazon Web Services in the United States (us-east-1). Transfers outside the European Economic Area are protected by the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise by the European Commission's Standard Contractual Clauses.

How long we keep it

• Account and Workspace data: while your account exists.
• Changes: 90 days.
• Credentials: until you delete or replace the Connection.
• After you close your account, we delete your data within [30 DAYS], except billing records, which we keep for [YEARS REQUIRED BY ACCOUNTING LAW] as the law requires.

Your rights

You can ask us to access, correct, delete, restrict or export your personal data, and object to how we use it. Email privacy@cloudspendguard.com. You can also complain to a data protection authority, such as [DATA PROTECTION AUTHORITY, e.g. NAIH for Hungary].

Cookies

This website does not use cookies, including for analytics. The Cloud Spend Guard app uses browser storage and cookies only to keep you signed in, which the service needs to work.

Security

See our Security page.

Children

Cloud Spend Guard is a service for businesses and is not meant for anyone under 16.

Changes

We will post changes here and email you about important ones.