Privacy Policy

• Your account: your name, your email, and your password, stored only as a salted scrypt hash. If you sign in with Google or GitHub, we get your name and verified email from it, never its password, and you don’t need a password with us. We also keep the country you signed up from and the one you last signed in from, which Cloudflare works out from your IP address; we don’t store the address itself. If you subscribe to the newsletter, we keep that you did and when, and when you unsubscribe. Also when you verified your email, your plan, trial dates, subscription status and billing period, your Polar customer and subscription IDs, and sign-in security counters (failed attempts and lockouts). Email verification and password reset links are stored only as hashes and expire (24 hours to verify, 1 hour to reset), and each works once.
• Your team: the email addresses you invite, when each invite was sent, and who joined. An invite emails the address you enter, once, with a link that expires in 7 days. People on your team see every company on your account.
• Your companies: each company’s name and the details you add (website, industry, headcount, fiscal year), plus the External ID that protects its cloud access.
• Cloud connections: cloud account IDs and the read-only access you grant. For AWS we don’t store passwords or long-lived keys: we assume the role you created, which only works with your company’s External ID. For Google Cloud you sign in with Google and allow read-only access, and we keep the refresh token Google returns. It’s useless without our app’s secret, which is kept apart from the database, and it stops working when you remove the connection or revoke Omni FinOps in your Google Account.
• Cloud data: daily cost and credits, invoices, your resource inventory with its tags, inventory changes, 30 days of CPU metrics, and list prices.
• What you create: statuses and comments (with who made them and when), budgets and alert recipients, plans, rules, preferences, analyzer conversations, how many AI questions you used each month, and the support tickets you send us (the topic, subject and message, and the company and page they’re about).
• Technical data: one session cookie that keeps you signed in, one that remembers whether you last signed in with Google or GitHub, a 10-minute one that secures that sign-in, and your theme and display preferences, kept in your browser. Our servers may log requests (such as IP address, time and page) to keep the service secure and fix errors. When you sign up or reset a password, Cloudflare Turnstile checks that you’re not a bot using your IP address and signals from your browser.

No advertising or analytics trackers, and no third-party cookies. We never see or store your full card details: Polar collects them at checkout. We never ask for your cloud passwords.

• To provide the service: sign you in, verify your email, reset your password when you ask, refresh your cloud data, build every page, bill your plan, and send the alert emails you set up.
• To keep it secure: check sign-ups for bots, lock accounts after repeated failed sign-ins, cap alert email, and prevent abuse.
• To run and support the service: our administrator uses an internal console that shows account details (name, email, country, plan, trial and subscription status, number of companies and connected accounts, and refresh activity) and your support tickets. To find and fix a problem, the administrator can also open your account from it and see the service as you do, including your cloud figures. Each time is logged, and that access ends after an hour. Only Trillo.CR’s administrator can open the console.
• To tell you about the service: changes to these policies, our terms or our prices, and security notices. We won’t send you marketing email unless you agree to it.
• To send the newsletter, only if you subscribed: when you sign up or in Profile, never by default. Every issue has an unsubscribe link, and mail apps like Gmail show their own Unsubscribe button for it; either takes one click. You can also switch it off in Profile. Unsubscribing doesn’t stop account emails, like password resets or the alerts you set up.
• To meet our legal obligations.

We process your data to perform our agreement with you, to meet legal obligations, and for our legitimate interest in keeping the service secure. We don’t sell your data, and we don’t use it to train AI models.

When you connect Google Cloud, Omni FinOps asks Google for read-only access and reads only:

• your Cloud Billing accounts and the projects billed to them;
• your billing export in BigQuery, which it finds among the datasets your Google account can see and queries for daily cost;
• Compute Engine VMs, disks, snapshots, IP addresses and Cloud NAT gateways;
• the daily CPU use of those VMs, from Cloud Monitoring.

We use this data only to show you your costs, inventory and savings in Omni FinOps. We don’t use it for advertising, sell it, or use it to train AI models. We transfer it to no one, except that your project names may go to Amazon Bedrock with an analyzer question it has to rephrase, and the service’s encrypted backups go to Amazon S3 (see Who processes it for us). Nobody at Trillo.CR reads it except when you ask us to look into a problem, for security, or when the law requires it.

Omni FinOps’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing a Google Cloud connection deletes everything Omni FinOps pulled through it, and its token. To end Google’s access too, remove Omni FinOps from your Google Account’s third-party connections.

• Amazon Web Services, in the United States (us-east-1). Through Amazon Bedrock: when the analyzer can’t place a question, the question’s text and your cloud account names are sent to the Amazon Nova Micro model to rephrase it. Your cost figures are never sent, and AWS doesn’t use Bedrock inputs to train its models. Through Amazon S3: our daily database backups, encrypted, in Trillo.CR’s own AWS account, versioned and deleted after 30 days.
• Proton AG, in Switzerland, delivers our emails: email verification and password reset links (your address and the link), alert emails (the recipients’ addresses and the alert’s content), your support tickets to our support inbox (your name, email, company, plan and message), and the newsletter to those who subscribed (their name and address).
• Cloudflare, Inc., in the United States, carries all traffic to the service: it encrypts it (TLS), protects it from attacks, and connects it to our servers through a secure tunnel. Its Turnstile check sees your IP address and browser signals when you sign up or reset a password. See its privacy policy.
• Polar Software, Inc., in the United States, sells and bills our plans as merchant of record. At checkout it collects your name, email, billing address, payment details and tax ID if you give one, and Stripe processes the payment for it. Polar handles that payment data as its own controller, under its privacy policy.
• The service and its database run on servers Trillo.CR operates in Costa Rica.

We share data with authorities only when the law requires it. If Trillo.CR or the service is transferred to another company, your data goes with it under this policy, and we’ll tell you beforehand. We update this list when our providers change. Business customers can find the same list, and our notice commitments, on our Trust & DPA page.

Your connected clouds’ own providers handle data under your agreement with them. We only read from them with the access you grant.

The service runs in Costa Rica, and we and our providers may process data outside your country, including in the United States and Switzerland. We send each provider only what it needs, and we use providers that commit to protecting it. Where the GDPR or UK GDPR require it, transfers rely on Standard Contractual Clauses.

• Account data: while your account exists. Deleting your account in Profile, confirmed by an emailed link, removes it right away; if you ask us by email instead, we delete it within 30 days. Either way we keep only what the law requires, plus a one-way hash of your email so it can’t start another free trial.
• Company and cloud data: until you erase or delete it in Company settings, or close your account.
• Backups and server logs: no more than 30 days. Backups are taken daily, encrypted, and stored off-site in Amazon S3.
• Unused verification, reset and account deletion links: they expire within 24 hours.

You can ask to see, correct or delete your personal data, object to some uses of it, or get a copy of it.

• In the app: change your name or delete your account in Profile. Export, erase or delete a company’s data in Company settings.
• By email: write to [email protected] for anything else. We aim to answer within 5 business days, and always within the time the law requires.

In Costa Rica you can also complain to the Agencia de Protección de Datos de los Habitantes (PRODHAB). Elsewhere, your local data protection authority.

Traffic is encrypted in transit. Passwords are stored as salted scrypt hashes, and session and emailed-link tokens only as hashes. Each company’s cloud access only works with its own External ID, and accounts lock after repeated failed sign-ins. Backups are encrypted. Our Trust & DPA page has the details. No system is perfectly secure: if a breach affects your personal data, we’ll tell you and the authorities as the law requires.

Omni FinOps is for businesses and isn’t meant for anyone under 18. We don’t knowingly collect children’s data.

We may update this policy as the service or the law changes. For a material change, we’ll tell you by email or in the app before it takes effect. The date at the top shows the latest version.

Privacy questions and requests: [email protected]. See also our Terms of Service.