Privacy Policy

1. Introduction

This Privacy Policy describes how CostTrail, Inc. ("CostTrail," "we," "our," or "us") collects, uses, and discloses your information when you use our cost optimization platform, website, mobile applications, and other services (collectively, the "Services").

By using our Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with our policies and practices, do not use our Services. This Privacy Policy may change from time to time. Your continued use of our Services after we make changes indicates your acceptance of those changes, so please check this policy periodically for updates.

2. Information We Collect

We collect several types of information from and about users of our Services, including:

2.1 Information You Provide to Us

• Account Information: When you register for an account, we collect your name, email address, company name, job title, and password.
• Billing Information: If you purchase a subscription, we collect payment information, billing address, and related transaction details.
• Profile Information: Information you provide in your user profile, such as a profile picture, biography, or preferences.
• Communications: Information you provide when you contact us for support, respond to surveys, or correspond with us.
• Customer Data: Data you upload, transfer, or input into our Services, including cloud account credentials, cost and resource data, and configuration information.

2.2 Information We Collect Automatically

• Usage Data: Information about your interactions with our Services, including pages visited, features used, and actions taken.
• Device Information: Information about the devices you use to access our Services, including IP address, browser type, operating system, and device identifiers.
• Location Information: General location information derived from your IP address.
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar technologies as described in our Cookie Policy section.

2.3 Information from Third Parties

• Cloud Provider Data: When you connect your cloud accounts, we collect information about your cloud resources, costs, and usage.
• Integration Partners: Information we receive from third-party services you integrate with our Services.
• Referrals: Information about you from other users who refer you to our Services.
• Public Sources: Publicly available information, such as social media profiles or company websites.

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing and Improving Services: To provide, maintain, and enhance our Services, including analyzing cloud costs, generating recommendations, and developing new features.
• Account Management: To create and manage your account, authenticate users, and process transactions.
• Communications: To communicate with you about your account, respond to inquiries, provide support, and send service-related announcements.
• Marketing: To send promotional communications, provide personalized content, and measure the effectiveness of our marketing efforts. You can opt out of marketing communications at any time.
• Analytics: To analyze usage patterns, troubleshoot issues, conduct research, and improve our Services.
• Security: To detect, prevent, and address technical issues, fraud, abuse, and security incidents.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

4. Information Sharing and Disclosure

We may share your information with the following categories of recipients:

• Service Providers: Third-party vendors and service providers who perform services on our behalf, such as cloud hosting, data analysis, payment processing, customer service, and marketing assistance.
• Business Partners: Partners with whom we offer co-branded services or joint marketing activities.
• Integration Partners: Third-party services that you connect to our Services, such as cloud providers or business applications.
• Your Organization: If you use our Services through an organization account, we may share your information with administrators of your organization.
• Legal Requirements: When required by law, subpoena, or other legal process, or if we have a good faith belief that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of all or some of our assets. In such a transaction, user information may be among the transferred assets.
• With Your Consent: We may share information with third parties when you give us consent to do so.

We do not sell your personal information. However, we may share aggregated or de-identified information that cannot reasonably be used to identify you.

5. Your Choices and Rights

Depending on your location, you may have certain rights regarding your personal information. These may include:

• Access: You can request access to your personal information we hold.
• Correction: You can request that we correct inaccurate or incomplete information.
• Deletion: You can request that we delete your personal information in certain circumstances.
• Restriction: You can request that we restrict the processing of your information in certain circumstances.
• Data Portability: You can request a copy of the information you provided to us in a structured, commonly used, and machine-readable format.
• Objection: You can object to our processing of your personal information in certain circumstances.
• Withdrawal of Consent: You can withdraw your consent at any time for processing activities based on consent.

To exercise these rights, please contact us at privacy@costtrail.com. We will respond to your request within the timeframe required by applicable law.

Please note that some of these rights may be limited where we have compelling reasons to continue processing your information or where data is being processed on behalf of an organization that is our customer.

6. Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect and use information about you and your device. Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie.

We use the following types of cookies:

• Essential Cookies: Necessary for the functioning of our Services, such as authentication, security, and basic functionality.
• Preference Cookies: Enable us to remember your preferences and settings.
• Analytics Cookies: Help us understand how users interact with our Services, which pages are visited, and how users navigate the site.
• Marketing Cookies: Used to track visitors across websites to display relevant advertisements.

You can control cookies through your browser settings and other tools. However, if you block certain cookies, you may not be able to use all the features of our Services.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, access controls, secure coding practices, and security testing.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

If you have reason to believe that your interaction with us is no longer secure, please immediately notify us at security@costtrail.com.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Account information is generally retained for as long as your account is active. If you close your account, we will retain certain information associated with your account for analytical purposes and recordkeeping integrity, as well as to prevent fraud, enforce our Terms of Service, take actions we deem necessary to protect the integrity of our Services, or protect the rights, safety, or property of our users.

Information collected via cookies and similar technologies is retained for varying periods depending on the specific cookie or technology and its purpose.

9. International Data Transfers

CostTrail operates globally, which means your information may be transferred to, stored, and processed in countries other than the country in which you are located. These countries may have data protection laws that are different from the laws of your country.

When we transfer your information internationally, we take appropriate safeguards to ensure your information receives an adequate level of protection, including:

• Using Standard Contractual Clauses approved by the European Commission
• Transferring to countries that have been deemed to provide an adequate level of protection by the European Commission
• Implementing binding corporate rules where applicable
• Obtaining your explicit consent in specific circumstances

10. Children's Privacy

Our Services are not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete such information as soon as possible.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at privacy@costtrail.com.

11. Links to Third-Party Sites

Our Services may contain links to third-party websites, services, and applications that are not operated or controlled by CostTrail. This Privacy Policy does not apply to those third-party services, and we are not responsible for their content, privacy policies, or practices.

We encourage you to review the privacy policies of any third-party services you access through our Services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will provide notice through our Services or by other means, such as email, before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about our data practices.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.