Privacy Policy

1. Introduction

RagoTech ("we," "our," or "us") operates CostObserver, a cloud cost observability platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, phone number (optional), and role.

Cloud Provider Data

We collect cost and usage data, resource metadata, configuration information, and security posture data from your connected cloud provider accounts (AWS, Azure, GCP, etc.) using read-only access credentials you provide. This includes:

• Cost and billing data
• Resource configurations and metadata
• Security and compliance data (e.g., security findings, vulnerability assessments, compliance status)

Usage Data

We automatically collect information about how you interact with our platform, including IP addresses, browser type, pages visited, and timestamps.

3. How We Use Your Information

• Provide and maintain our cost observability and security posture visibility services
• Process and analyze your cloud cost data with security context
• Identify cost anomalies and security-related spending patterns
• Send service notifications and updates
• Improve our platform and develop new features
• Detect and prevent fraud or security issues

4. Data Storage and Security

Your data is stored on secure, enterprise-grade cloud infrastructure with industry-standard encryption. While our platform infrastructure runs on secure cloud services, we connect to and process data from multiple cloud providers (AWS, Azure, GCP, etc.). We implement industry-standard security measures including:

• Encryption at rest and in transit (TLS/SSL)
• Read-only access to your cloud accounts. We do not have access to your application code, databases, or workloads
• Logical isolation at the database level per organisation
• Regular security audits and monitoring

We retain your cost data for 390 days and cache data for 7 days to provide historical analysis and trends.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Cloud infrastructure and service providers that help us operate our platform
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your account and data
• Export your data
• Opt-out of marketing communications

To exercise these rights, contact us at legal@costobserver.com.

7. Responsible AI

We use AI for cost analysis and recommendations. Your data is never used to train AI models or shared with third-party AI providers. Our AI matches your data against pre-trained patterns to identify anomalies and optimization opportunities.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand how users interact with our platform and improve our services. We do not use third-party advertising cookies.

9. International Data Transfers

Your data may be transferred to and processed in countries where our cloud infrastructure providers operate data centers. We ensure appropriate safeguards are in place for international transfers.

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform.

12. Contact Us

For privacy-related questions or concerns, contact us at:

Email: legal@costobserver.com
Company: RagoTech, Singapore