Privacy Policy

1. Introduction

GCP FinOps ("Service") is operated by Cloud Brainy LLC ("Company", "we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information that you voluntarily provide, including:

• Email address (when you sign up or join our waitlist)
• Name (if provided)
• Company name (if provided)
• Payment information (processed securely by our payment provider)

2.2 Google Cloud Billing Data

When you connect your GCP billing export, we access:

• Billing export data from your BigQuery dataset (read-only access)
• Cost and usage information for GCP services
• Project and resource identifiers

Important: We only request read-only access. We cannot modify, delete, or create any resources in your Google Cloud environment.

2.3 Automatically Collected Information

• Device and browser information
• IP address
• Pages visited and features used
• Date and time of access
• Referring website

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Analyze your GCP costs and generate optimization recommendations
• Display dashboards and cost insights
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your information includes:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interests: Processing for our legitimate business interests, such as improving the Service
• Consent: Where you have given consent for specific processing activities
• Legal Obligation: Processing necessary to comply with legal requirements

5. Data Sharing and Disclosure

We may share your information in the following situations:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
• Legal Requirements: If required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: For any other purpose with your explicit consent

We do not sell your personal information to third parties.

6. Third-Party Services

Our Service uses the following third-party services:

• Google Firebase: Authentication and database services
• Google Cloud Platform: Infrastructure and hosting
• Google BigQuery: To read your billing export data

Each third-party service has its own privacy policy. We encourage you to review their policies.

7. Data Security

We implement appropriate technical and organizational security measures, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Read-only access to your GCP resources
• Regular security assessments
• Access controls and authentication

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Upon account deletion, we will delete or anonymize your data within 30 days, unless retention is required by law.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Request transfer of your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at the email address below.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected
• Know whether your personal information is sold or disclosed and to whom
• Say no to the sale of personal information
• Access your personal information
• Request deletion of your personal information
• Not be discriminated against for exercising your privacy rights

11. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service. Cookies are files with a small amount of data that may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

12. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to the transfer of information to countries outside your country of residence.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the new policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Cloud Brainy LLC
d/b/a Brain Agents AI
Email: privacy@brainagents.ai