Privacy Policy

1. Data we collect

We collect the minimum data required to operate the service:

• Account data: Your email address and hashed password when you register.
• Cloud scan data: Resource metadata returned by your cloud provider's APIs (resource IDs, names, sizes, regions, pricing). We do not collect application data, database contents, or business data from your cloud accounts.
• Usage data: Scan timestamps, finding counts, and feature usage for service improvement.
• Support data: Any information you voluntarily provide when contacting us.

2. Cloud credentials & access

• AWS: A cross-account IAM role with read-only permissions is created in your account via CloudFormation. CostSave assumes this role temporarily to run scans. We never store your AWS access keys.
• Cloudflare: You provide a read-only API token. The token is encrypted with AES-256-GCM and stored in our database. It is never logged or transmitted in plaintext.
• GCP: You provide a Service Account key with read-only IAM roles. The key is encrypted with AES-256-GCM at rest.

You can revoke access at any time. See our disconnect guides for step-by-step instructions.

3. How we use your data

We use your data exclusively to:

• Run cost scans and generate savings reports
• Display historical scan results in your dashboard
• Send transactional emails (scan complete, account alerts)
• Improve scan accuracy and add support for new cloud services

We do not sell your data, use it for advertising, or share it with third parties for their own purposes.

4. Data storage & retention

• Scan results are retained for 90 days after your last scan and deleted thereafter.
• Credentials are encrypted at rest using AES-256-GCM. Encryption keys are stored separately from the data they protect.
• Account data is retained as long as your account is active. You may delete your account at any time from Settings.
• Backups are encrypted and retained for up to 7 days for disaster recovery only.

5. Data sharing

We share data only with essential service providers needed to operate CostSave:

We do not share scan results, cloud resource data, or credentials with any third party.

6. Your rights

Under GDPR and applicable Indian data protection law, you have the right to:

• Access: Request a copy of all personal data we hold about you
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your account and all associated data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your data

To exercise any right, email us at [email protected]. We will respond within 30 days.

7. Cookies

CostSave uses only essential cookies required to maintain your login session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Contact

• Email: [email protected]
• Company: Printf Technologies
• Address: 603, 6th Floor, Kasturi Pride, S.P. Ring Road, Ahmedabad – 382350, Gujarat, India