Privacy Policy

Welcome to acost ("we," "our," or "us"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI cost intelligence platform.

By accessing or using acost, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and complete transactions
• Calculate accurate AI usage costs and generate insights
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Detect, prevent, and address technical issues and security vulnerabilities
• Analyze usage patterns to improve user experience
• Comply with legal obligations

We implement appropriate technical and organizational security measures to protect your personal information, including:

• AES-256 encryption for sensitive data at rest
• TLS/SSL encryption for data in transit
• Secure authentication via Supabase Auth
• Regular security audits and updates
• Access controls and monitoring
• Secure cloud infrastructure (Vercel, Supabase)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our platform (e.g., Vercel for hosting, Supabase for database services)
• Legal Requirements: When required by law, subpoena, or other legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection: To protect the rights, property, or safety of acost, our users, or others

We retain your information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us.

Telemetry data is retained indefinitely to provide historical cost analysis and insights, unless you specifically request its deletion.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to certain processing of your data
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the information provided below.

We use cookies and similar tracking technologies to track activity on our service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

We use the following types of cookies:

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how visitors interact with our service

Our service uses the following third-party services:

• Supabase: For authentication and database services
• Vercel: For hosting and deployment
• PriceToken.ai: For AI model pricing data (public API)
• OpenRouter: For AI model pricing data (public API)

These third-party services have their own privacy policies. We encourage you to review their privacy statements.

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

By using our service, you consent to the transfer of your information to our facilities and to the third parties with whom we share it as described in this Privacy Policy.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.