Privacy Policy

Effective: 11 August 2026

This policy explains how AgentCost (“AgentCost”, “we”, “us”) processes personal data when you visit our website, subscribe to, or use the AgentCost service.

1. Data we process

• Contact and account information, such as email address and client identifiers.
• Subscription and billing references supplied by Stripe. We do not receive or store full payment-card numbers.
• AI usage metadata required to provide cost controls and analytics, such as model, token counts, timing, client or agent identifier, cost estimates, and request status.
• Technical and security logs, such as IP address, device/browser information, timestamps, and authentication events.
• Support communications you send to us.

2. Why we use data

We use data to provide and secure the service, authenticate users, enforce budgets, calculate usage and estimated savings, manage subscriptions, respond to support requests, prevent abuse, comply with law, and improve reliability.

3. Legal bases

Where the GDPR or similar law applies, processing is based on performance of our contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where required.

4. AI request content

AgentCost may transmit request content to the AI provider selected or configured for the service. Customers must not submit personal, confidential, regulated, or sensitive data unless they have a lawful basis and the provider configuration is appropriate for that data.

5. Service providers

We may use infrastructure, security, AI model, analytics, communication, and payment providers. Stripe processes payment data under its own privacy policy. Providers receive only the information reasonably required for their function.

6. International transfers

Providers may process data outside your country. Where required, we use legally recognised transfer safeguards or rely on providers that implement them.

7. Retention

We retain data only as long as reasonably necessary to provide the service, meet accounting or legal requirements, resolve disputes, and protect security. Retention periods vary by data type and contractual requirements.

8. Security

We use reasonable technical and organisational safeguards. No online service can guarantee absolute security, and customers remain responsible for protecting their credentials and API keys.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your data, and to complain to a data-protection authority. Some data may be retained where legally required.

10. Children

AgentCost is a business service and is not directed to children.

11. Changes

We may update this policy and will publish the revised effective date here.

12. Contact

For privacy questions or requests, email support@avivar.io.