logo

Privacy Policy

Last updated: December 25, 2025

At CostKatana, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI cost optimization platform.

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

1.1 Personal Information

  • Name and email address
  • Company name and job title (optional)
  • Payment and billing information (for paid plans)
  • Profile picture and preferences

1.2 Usage Data

  • AI API usage metrics and costs
  • Service provider information (OpenAI, Anthropic, etc.)
  • Model usage patterns and optimization data
  • Feature usage and interaction data

1.3 Technical Information

  • IP address and device information
  • Browser type and version
  • Operating system
  • Log files and error reports

2. How We Use Your Information

We use the information we collect exclusively to provide and improve the functionality of our AI cost optimization services. We do NOT use your data for advertising, marketing to third parties, or any purposes unrelated to providing you with our core service. All data usage is strictly limited to the following purposes:

  • Service Delivery: To provide and maintain the core functionality of our AI cost optimization platform
  • Account Management: To create and manage your account, authenticate your identity, and process transactions
  • Cost Analytics: To analyze your AI usage patterns and provide you with personalized cost optimization recommendations
  • User-Requested Features: To enable features you explicitly activate, such as generating reports, sending notifications, and managing calendar alerts
  • Communication: To send you service-related updates, security alerts, and respond to your support inquiries
  • Security and Reliability: To detect, prevent, and address technical issues, fraud, security threats, and ensure platform stability
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes

Google OAuth Data Usage

When you connect your Google account to CostKatana, we access your Google data solely to provide you with the core functionality of our application. We do not use your Google user data for any other purposes including:

  • NO advertising or marketing: We do not use your Google data to serve advertisements or create marketing profiles
  • NO third-party sharing: We do not sell, rent, or share your Google user data with third parties for their purposes
  • NO unrelated services: We do not use your Google data for services unrelated to the core functionality you've authorized
  • NO AI model training: We do not use your Google user data to train AI models or for machine learning purposes beyond providing your requested service

Specific Google Scopes and Their Purpose:

  • • Email & Profile: To authenticate your identity and create your account
  • • Google Drive (File Picker - drive.file scope): To allow you to select specific files from your Google Drive and to create new documents when you explicitly request it. This limited scope only provides access to files you create through our app or select via the file picker - we cannot access your other Drive files
  • • Google Docs (File Creation Only): To enable you to create new cost analysis documents in Google Docs format when you request an export
  • • Google Sheets (File Creation Only): To allow you to create new spreadsheets for cost data analysis when you request an export

You can revoke our access to your Google data at any time through your Google Account Permissions.

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist in operating our platform (e.g., cloud hosting, payment processing)
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Legal Requirements: When required by law, court order, or government regulation
  • Protection of Rights: To protect our rights, property, or safety, or that of our users
  • With Your Consent: When you explicitly authorize us to share your information

4. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Secure data centers with physical security measures
  • Employee training on data protection and privacy

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request access to your personal information and receive a copy
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal obligations)
  • Portability: Request transfer of your data to another service
  • Objection: Object to processing of your personal information for certain purposes
  • Restriction: Request restriction of processing in certain circumstances
  • Withdraw Consent: Withdraw consent where processing is based on consent

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our platform and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

Analytics and Tracking

We use Google Analytics to understand how visitors interact with our website. This helps us improve our services and provide better user experiences.

  • What we track: Page views, user interactions, scroll depth, time spent on pages
  • Data anonymization: IP addresses are anonymized and no personally identifiable information is collected
  • Cookie duration: Analytics cookies expire after 1 year
  • Opt-out: You can opt-out at any time through our consent banner or browser settings

For more information about Google Analytics and privacy, visitGoogle's Privacy Policy.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes.

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate safeguards to ensure your information receives an adequate level of protection.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Support: support@costkatana.com