Privacy Policy

What we collect directly from you

• Email address, name (optional), and a bcrypt hash of your password — never the password itself
• Workspace name
• Whether you opted in to product-update emails at signup
• Billing details — handled entirely by Stripe; we never see or store your card number

What flows through the proxy

When you route LLM API traffic through CostTrim, we log: the model used, token counts, cost, latency, HTTP status, an auto-generated tag, and up to 4,000 characters each of the prompt and response text — so you can search and review what happened. This is stored until you delete your workspace; we don't currently auto-purge logs after any fixed period, regardless of plan.

Your provider API key (OpenAI, Anthropic, Groq, DeepSeek, Llama API) is read from the request, forwarded to that provider, and never written to our database — with one exception: the no-code Chat Widget feature stores your key encrypted at rest (AES-256-GCM), because a public embed has no backend of its own to hold it. This is called out again in the dashboard when you create a widget.

Who else sees data (subprocessors)

• Stripe — payment processing (subscriptions, invoices), US-based
• Resend — transactional email (welcome, password reset, cancellation, feedback notifications, product updates you opted into), US-based
• Whichever LLM provider you configured — your proxied requests go directly to OpenAI, Anthropic, Groq, DeepSeek, or Meta's Llama API, per your own account with them
• Anthropic, again, separately — on Pro/Business plans, Dashboard → Insights sends a sample of your own costliest recent prompts to Claude Haiku (billed to us, using our own key) to suggest shorter rewrites. You can ignore or dismiss these suggestions; the underlying data is your own prompt text, already in our logs.
• NexoSoftware — operator of the service, hosting on its own server (VPS), no separate third-party data access

We don't sell your personal information to anyone, and we don't share it with third parties for their own advertising purposes. The subprocessors above are the only parties data reaches, and only to the extent needed to run the service.

Where data is processed

Our subprocessors (Stripe, Resend) are US-based, so data shared with them is primarily processed in the United States. If you're accessing the service from outside the US, your data is transferred to and processed in the US as part of using it.

Cookies

One essential session cookie (via NextAuth) keeps you logged in. No advertising or cross-site tracking cookies.

Your privacy rights (California and other US states)

If you're a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the right to: know what personal information we collect and why; request a copy or deletion of it; correct inaccurate information; and opt out of the "sale" or "sharing" of personal information — which is moot here, since we don't sell or share it. We don't discriminate against you for exercising any of these rights.

Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and a growing list of other states have similar consumer privacy laws with broadly equivalent rights (access, correction, deletion, and opt-out of sale/targeted advertising, which again doesn't apply here). If you're a resident of one of these states, the same request process below applies to you.

To exercise any of these rights, use the Contact method below. We'll verify your identity via the email address on your account before acting on a request.

If you're in the EU, UK, or Switzerland

You still have rights under GDPR/UK GDPR even though this specific page is written US-first — see the localized version for your country for the full detail (supervisory authority, legal basis for processing, etc.), or just use the Contact method below; the same data-access, correction, deletion, and portability rights apply regardless of which language page you read.

Children's privacy

CostTrim isn't directed at children, and we don't knowingly collect personal information from anyone under 16. If you believe a child has created an account, contact us and we'll delete it.

Your controls

• Unsubscribe from product-update emails anytime via the link in any such email
• Export your logs as CSV from the dashboard
• There's no self-serve account deletion yet — email us (see Contact below) and we'll delete your workspace and everything tied to it

Changes

We may update this policy as the product or applicable law changes. Material changes will be reflected here with an updated date.

Contact

Questions about this policy or a data request: use Dashboard → Feedback if you have an account, or reply to any email we've sent you.

CostTrim is operated by NexoSoftware, Bukowiec, ul. Nowotomyska 9a, Poland.