Privacy Policy

1. Information We Collect

1.1 Azure Infrastructure Metadata

When you grant us read-only access to your Azure subscription, we collect:

• Resource Information: Names, types, locations, SKUs, and configurations of Azure resources
• Cost Data: Current pricing tiers, billing information, and historical spend data
• Configuration Details: Settings relevant to optimization (redundancy, performance tiers, scaling settings)
• Subscription Details: Subscription IDs, tenant names, and resource group structures

1.2 Account Information

When you purchase our service, we collect:

• Name and email address
• Company name (if provided)
• Billing information (processed securely through our payment provider)

1.3 Website Usage Data

When you visit our website, we automatically collect:

• IP address and browser information
• Pages visited and time spent on each page
• Referral source (how you found our website)
• Device type and operating system

2. What We Do NOT Collect

It's important to understand what we specifically DO NOT access or collect:

• Application Data: We never read data stored in your databases, storage accounts, or other data repositories
• Credentials: We don't access passwords, API keys, connection strings, or other secrets
• Customer Data: We don't see any personal information about your customers or end users
• Source Code: We don't access code repositories or application logic
• Network Traffic: We don't monitor or intercept any network communications

3. How We Use Your Information

We use the collected information to:

• Provide Our Service: Analyze your infrastructure and generate cost optimization recommendations
• Generate Reports: Create detailed reports with savings projections and implementation guidance
• Customer Support: Respond to your questions and provide implementation assistance
• Service Improvement: Improve our AI models and analysis algorithms (using only aggregated, anonymized data)
• Billing: Process payments and manage subscriptions
• Communications: Send service-related emails (reports, support responses, subscription updates)

4. Data Retention

4.1 Infrastructure Metadata

For one-time analysis: We retain your infrastructure metadata for 90 days after report delivery to support our 2x ROI guarantee and provide implementation support. After 90 days, all infrastructure data is permanently deleted.

For subscription plans: We retain your most recent analysis data to support trend tracking and ongoing optimization. Historical data older than 12 months is automatically deleted.

4.2 Account Information

We retain your account information (name, email, billing history) as long as you maintain an active subscription or for 3 years after your last purchase, whichever is longer, to comply with financial regulations.

5. Data Sharing and Disclosure

We do not sell, rent, or share your data with third parties, except in these specific circumstances:

5.1 Service Providers

• AI Service Providers: By default, infrastructure metadata is sent to third-party AI services for analysis
• Payment Processors: Billing information is processed by secure payment providers
• Hosting Services: Our infrastructure is hosted on secure cloud platforms

All service providers are bound by confidentiality agreements and are prohibited from using your data for any purpose other than providing services to us.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or other legal process.

5.3 Aggregated Data

We may share aggregated, anonymized statistics about Azure optimization trends (e.g., "35% average savings across all customers") that cannot be traced back to individual customers.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict access controls limit who can view customer data
• Authentication: Azure service principal credentials are stored in secure key vaults
• Audit Logs: All access to customer data is logged and monitored
• Regular Security Reviews: We conduct regular security assessments and penetration testing

7. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of all data we have about you
• Correction: Request corrections to inaccurate information
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing emails (service emails remain necessary)
• Revoke Access: Remove our read-only access to your Azure subscription at any time
• Data Portability: Request your analysis reports in a machine-readable format

To exercise any of these rights, contact us at privacy@analyzemycloud.com.

8. Cookies and Tracking

Our website uses cookies for:

• Essential Cookies: Required for website functionality (cannot be disabled)
• Analytics Cookies: Help us understand how visitors use our site
• Preference Cookies: Remember your settings and preferences

You can control cookie preferences through your browser settings. Disabling cookies may affect website functionality.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by regulatory authorities.

10. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation including:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on our website. Your continued use of the service after such modifications constitutes acceptance of the updated policy.

14. Contact Us

For questions about this Privacy Policy or our data practices, please contact: