Terms & Privacy

Last updated: 21 July 2026

⚖️ Note: this is a good-faith starting template, not legal advice. Replace the [bracketed] details with your own and have it reviewed by a qualified lawyer before relying on it for a commercial service.

1. Acceptance

By creating an account or using AWS Billing Optimizer (the “Service”), operated by [Your name / company] (“we”, “us”), you agree to these Terms. If you do not agree, do not use the Service.

2. What the Service does

The Service reads cost, usage, and configuration data from AWS accounts you connect and presents optimization recommendations. It performs read-only operations by default and does not make changes to your AWS resources unless you explicitly enable and confirm a remediation action.

3. Your responsibilities

You must own, or be authorized to access, any AWS account you connect.
You are responsible for the credentials or roles you provide and for revoking them.
You are responsible for reviewing and validating any recommendation before acting on it.
You must not abuse, attack, reverse-engineer, or overload the Service.

4. Recommendations are informational

All savings figures and recommendations are estimates generated from AWS data and may be inaccurate or incomplete. They are provided for informational purposes only. You are solely responsible for any action you take in your AWS account.

⚠️ Disclaimer of warranties & limitation of liability. The Service is provided “as is” and “as available”, without warranties of any kind, express or implied. To the maximum extent permitted by law, we are not liable for any direct, indirect, incidental, consequential, or special damages — including lost savings, unexpected AWS charges, data loss, service interruption, or security incidents — arising from your use of the Service. Our total liability shall not exceed the amount you paid us in the preceding 12 months (which for a free service is $0).

5. Availability & changes

The Service may be unavailable, rate-limited, or discontinued at any time without notice. We may update these Terms; continued use means acceptance of the updated Terms.

6. Termination

You may stop using the Service and delete your data at any time. We may suspend or terminate accounts that violate these Terms or abuse the Service.

7. Not affiliated with AWS

This Service is an independent tool and is not affiliated with, endorsed by, or sponsored by Amazon Web Services, Inc. “AWS” is a trademark of Amazon.

8. Contact

Questions: [[email protected]].

1. What we collect

Account info — your email and name (from Google sign-in or registration), and a hashed password if you register with one.
AWS connection details — the access keys or IAM role ARN you add. Secret keys are encrypted at rest.
Scan results — cost/usage metadata and the recommendations generated for the accounts you connect.
Basic technical data — such as IP address, used for security and rate limiting.

2. How we use it

Solely to operate the Service: authenticate you, connect to the AWS accounts you provide, generate recommendations, and protect the Service from abuse. We do not sell your data and do not share it with third parties for marketing.

3. AWS credentials

Credentials you provide are used only to make read-only AWS API calls on your behalf. Secret access keys are encrypted before storage and are never displayed back to you. We recommend using a read-only IAM role so no secret is stored at all. You can delete a connected account (and its stored credentials) at any time from the dashboard.

4. Data storage & security

Data is stored in a managed PostgreSQL database. Connections use TLS, secrets are encrypted at rest, and each user’s data is isolated — no user can access another user’s accounts or results. No method of storage is 100% secure; we cannot guarantee absolute security.

5. Data retention & deletion

We retain your data while your account is active. Delete a connected account to remove its credentials immediately. To delete your entire account and associated data, contact [[email protected]].

6. Third-party services

We use Google (sign-in), a cloud host, and a managed database provider to run the Service. Your interactions with AWS are governed by AWS’s own terms and privacy policy.

7. Changes & contact

We may update this policy; the “last updated” date reflects changes. Questions or data requests: [[email protected]].