Privacy & Security

Your AI stack is confidential business information.

AI Pricing Watch offers a short free snapshot and a fuller paid declaration. Both ask only for enough information to analyse spend, seats, usage and constraints. That stack intelligence can reveal how an organisation works. It is therefore treated as confidential by default.

Last updatedJuly 13, 2026

Contacthello@aipricingwatch.com

1. What we ask for

The free snapshot asks for a work email, organisation/project, approximate monthly spend by category, seat activity, main tools and one concern. The full intake adds plans, renewal dates, usage patterns and constraints. Approximate costs and non-secret usage information are normally enough.

Do not send passwords, API keys, secret tokens, payment card data, banking credentials, identity documents, customer records, private source code, prompts containing client data, or third-party confidential material.

2. How the information is used

to generate the immediate free snapshot;
to score whether a direct rapid follow-up is useful;
to create your private AI stack declaration;
to prepare weekly savings/action reports;
to compare your declared tools with public pricing and changelog sources;
to maintain your account, declaration history and report history;
to handle support, billing state and cancellation requests.

3. How the information is stored

Production storage is intended to run on a private server directory that is not publicly served. The application stores intake records, account state, declaration versions and report history in server-side files controlled by the service. Public static pages must never contain customer stack declarations.

Access controlPrivate report access uses email/password account access; server-side files are restricted to the service user.

TransportPublic production traffic must use HTTPS. Stripe handles payment card data through its own hosted checkout.

MinimisationThe product is designed to work from non-secret stack and spend information. We ask for less, not more.

No resaleDeclared stack information is not sold, rented, or published as customer proof.

4. Network and third parties

Payment data is processed by Stripe. Public provider pricing/changelog pages may be consulted to prepare reports. Customer stack declarations should not be posted publicly or sent to unrelated third-party services. If an external AI/model service is later used to assist report drafting, sensitive customer fields should be minimised, redacted or summarised before transmission unless the customer explicitly approves a stronger processing mode.

5. Retention and deletion

Data is kept while the account or subscription is active and for a reasonable operational period afterwards, unless a longer legal obligation applies. You can request deletion or export of your declaration and reports at hello@aipricingwatch.com.

6. Current production requirement before launch

HTTPS only on the public domain.
Server process bound to localhost behind the reverse proxy.
Data directory outside the public web root.
Restrictive filesystem permissions for account and intake files.
No secrets in public files, logs, URLs or reports.
Security headers on application responses.
Manual review before any real customer data is used in a sample, demo or marketing artifact.

This page is an operational privacy/security commitment for the MVP. It is not a substitute for legal advice or a full enterprise security certification.