Privacy Policy

Last Updated: June 2026

1. Introduction

MLCostIntel LLC ("MLCostIntel", "we", "us") provides ML infrastructure cost optimization services. This policy explains how we collect, use, and protect your information when you use our platform at mlcostintel.com and app.mlcostintel.com.

2. Information We Collect

Account Information:

• Name, email address, and company name (provided during signup)
• Authentication data managed by our identity provider (Clerk)

AWS Billing Data:

• AWS Cost and Usage Report (CUR) data accessed via a read-only IAM role you configure in your AWS account
• This includes: service costs, resource identifiers, usage quantities, pricing details, and resource tags
• We do NOT access your application data, source code, databases, logs, or any non-billing AWS resources

Usage Data:

• Pages visited, features used, and interaction patterns within our platform
• Browser type and device information

Communication Data:

• Emails and messages exchanged with us through the platform or email

3. How We Use Your Information

• To provide ML cost analysis, optimization recommendations, and assessment reports
• To operate and improve our platform
• To communicate with you about your account, assessments, and optimization opportunities
• To send engagement emails about your assessment results (you can opt out at any time by replying to any email)
• To monitor platform health and troubleshoot issues

4. How We Store and Protect Your Data

• All data is stored on AWS infrastructure in the United States
• Data is encrypted at rest (AES-256) and in transit (TLS 1.2+)
• Database access is restricted to our application via private subnets and security groups
• We use temporary AWS STS sessions to access your CUR data — we do not store your AWS credentials
• Access to production systems is restricted to authorized personnel
• Your data is logically isolated per tenant; AWS Marketplace and direct customers are not commingled

5. Data Sharing

We do NOT:

• Sell your data to third parties
• Share your billing data with other customers
• Use your data for advertising
• Share your data with third parties except the subprocessors required to operate the service: AWS (hosting & email), Clerk (authentication), Stripe (payment processing for direct plans), and Svix (webhook delivery). The current list is on our Security page.

6. Data Retention

• Account and billing data: retained while your account is active
• Upon account deletion: all your data is deleted within 30 days
• Engagement email logs: retained for 12 months
• You can request data deletion at any time by contacting us

7. Your Rights

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of engagement emails
• Export your data
• Revoke AWS access at any time by deleting the IAM role in your AWS account

For EU/EEA residents (GDPR):

• We process data based on legitimate interest (providing the service you signed up for) and your consent
• You have additional rights including data portability and the right to lodge a complaint with a supervisory authority

8. Cookies

We use essential cookies only:

• Authentication session cookies (required for the platform to function)
• No advertising cookies
• No third-party tracking cookies

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our platform.

10. Contact

For privacy questions, data requests, or to exercise your rights:

Email: contact@mlcostintel.com

MLCostIntel LLC