Privacy Policy
This policy explains what data AIntOps collects, why, and the choices and rights you have over it — including your rights under the EU General Data Protection Regulation (GDPR) if you are located in the European Economic Area.
1. Who we are
AIntOps ("we", "us", "our") operates the AI Cost Intelligence Platform available at aintops.com and app.aintops.com. For any question about this policy or your data, contact us at hello@aintops.com.
2. Data we collect
2.1 Data you give us directly
- Waitlist and account email address, when you request early access or create an account.
- Third-party API credentials (e.g. OpenAI, Anthropic, Mistral admin keys) that you choose to connect, so we can retrieve your usage and cost data on your behalf.
- Account and organization information — name, role, and team members you invite, once the product is in general availability.
2.2 Data we collect automatically
- Usage data — pages visited, referrer, and general interaction data on this website, used to understand product interest and improve the site.
- Technical data — IP address and timestamp, logged when you submit the waitlist form, for fraud prevention and to satisfy legitimate security interests.
3. How we use your data
- To operate the waitlist and notify you about early access.
- To provide the core product functionality: retrieving, storing, and displaying your AI provider cost and usage data once you connect an account.
- To send product updates and, if you opt in, marketing communications. You can unsubscribe at any time.
- To detect abuse, secure our systems, and comply with legal obligations.
We do not sell your personal data, and we do not use the content of your AI provider usage data to train any model.
4. How we protect your data
Third-party API credentials are encrypted at rest using Fernet (AES-128) with HMAC authentication, and are decrypted only in memory at the moment an API call is made on your behalf. Passwords are hashed with bcrypt. Access to the product is authenticated via short-lived JWT tokens with refresh rotation. Every database query in the multi-tenant platform is scoped to your organization ID to prevent cross-account data exposure.
5. Data retention
Waitlist email addresses are retained until you ask us to delete them or until early access closes, whichever comes first. Once you have an active account, usage and cost event data is retained in raw form for 90 days and in aggregated form thereafter, so historical trends remain available without keeping unnecessary raw data. You may request deletion of your account and associated data at any time.
6. Third-party processors
We rely on a limited number of infrastructure providers to operate the service — for example, cloud hosting, database, and, if enabled by your organization, Slack for notifications. These providers process data strictly on our instructions and under contractual confidentiality obligations. We do not share your data with third parties for their own marketing purposes.
7. Cookies
This website uses only strictly necessary cookies required for core functionality (such as maintaining an admin session where applicable). We do not use third-party advertising or tracking cookies.
8. Your rights (GDPR & beyond)
If you are located in the European Economic Area, the UK, or another jurisdiction with similar protections, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data ("right to be forgotten").
- Object to or restrict certain processing.
- Request a portable copy of your data.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email hello@aintops.com. We will respond within 30 days.
9. International transfers
Where data is processed outside your jurisdiction, we rely on appropriate safeguards, such as Standard Contractual Clauses, to ensure your data remains protected to the same standard.
10. Changes to this policy
We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above, and where appropriate, we will notify active account holders directly.
11. Contact
Questions about this policy or your data can be sent to hello@aintops.com.