Template copy. To be reviewed by a qualified UK solicitor before launch.
Privacy notice
Last updated 2026-10-25 · Version 2026-10-25
The short version
We collect what we need to run your report, we never sell it, and you can ask us to delete it at any time.
Who we are
CostAssured is run by Critical Cloud Limited, registered in England and Wales, company number [company number]. We are the controller of your account data. Contact: privacy@costassured.ai.
What we collect
Account details, billing and usage metadata from the platforms you connect, and contracts you choose to upload. We store usage metadata and configuration inventory. We never store telemetry or the content of your applications. Platform metadata can include the names or emails of people who created keys. [Lawful basis to be confirmed.]
Why we use it
To produce your report, check later bills, send the service emails you need, and, only if you opt in, send product news. Each purpose and its lawful basis is listed in the table below. [Table to follow.]
On the public pages we count visits with anonymous page-view statistics from our hosting provider. They use no cookie, we do not use them to identify you or follow you across sites, we remove the query string from every address before it is counted, and the only other things recorded are which links and tools are used, as fixed names with no text you type. [Lawful basis and how to object to follow.]
Agreeing to the Terms and Privacy notice is recorded with the version and the time. Product news is a separate choice, off unless you tick it, and you can withdraw it at any time. Report emails are service emails and do not depend on it.
If you join a waitlist for a platform we do not support yet, we record your email and your interest so we can decide what to build next. We do not email you about it.
How long we keep it
Metadata for [number] months so we can show trends. When you disconnect a platform we delete its data within [number] days. Credentials are destroyed at once. When you delete an organisation we delete its data and remove its stored files. Our payment provider keeps the billing records it must keep for tax and accounting law, such as invoices, after the organisation is gone.
Your rights
You can ask to see, correct, move or delete your data, or object to how we use it. Email us and we will reply within one month.
Complaints
If you are unhappy with how we use your data, tell us first. You can also complain to the Information Commissioner at ico.org.uk.