Privacy Policy

Costory Privacy Policy
Publish date: 06 August 2024

Costory respects your preferences concerning the collection and use of your personal data. This Privacy Policy explains how Costory collects, uses, and discloses information about you through our website (www.costory.io), SaaS platform, and related interactions. It also outlines your rights and how you can exercise them. By using our website or SaaS application, you consent to the collection and use of information as described in this policy.

By using this website, you consent to the collection and use of the information described here. From time to time Costory may also seek your explicit consent to process certain data and information collected on this website or volunteered by you.

Note that all of the information set out below may not apply to you. Below is an overview of all possible situations in which Costory could interact with you, and one or more of these may apply to you depending on how you have interacted with Costory.

Please note that you must be at least 16 years old to use our services.

CONTROLLER OF THE PROCESSING

The data controller of your personal data is Costory SAS, located at 282 rue des Pyrénées, 75020, Paris, FRANCE.

APPLICABILITY OF THIS PRIVACY POLICY

This Privacy Policy applies to Costory’s website, SaaS platform, and other interactions you may have with Costory. This includes responding to inquiries, managing accounts, and processing data for marketing and service delivery. It also governs the processing of data collected through the SaaS platform, such as customer usage data and financial information related to cloud spending analytics.

This policy does not apply to third-party applications or services that integrate with our platform or website.

INFORMATION WE COLLECT AND RECEIVE

Costory may collect or receive personal data in the following ways:

  • Customer Data: For our SaaS platform, we collect and process data submitted by customers, such as AWS billing logs, financial data, and user activity logs. This data helps finance teams manage and optimize their cloud spending .
  • Account and Contact Information: We collect personal information such as your name, email address, phone number, company name, and job position when you create an account, request information, or engage with our services.
  • Usage Information: We collect metadata, log data, device information, and cookies to understand how you interact with our website and platform, enabling us to improve our services and tailor the user experience.
  • Marketing and Promotions: With your consent, we may use your contact information to send you marketing communications about new products, services, and offers. You can opt out at any time via the provided links in the communications or by contacting us at https://www.costory.io/contact-us/.
  • Job Applications: If you apply for a job, we collect personal data related to your application, such as your resume, LinkedIn profile, and other relevant information .
  • Third-Party Services: We may receive information from third-party services integrated with our platform, such as authentication providers or cloud storage services .

Costory processes your personal data for several purposes:

  • Service Delivery: To provide and improve our SaaS platform, respond to your inquiries, and manage your account.
  • Marketing: To send you promotional content if you have provided consent.
  • Legal Compliance: To comply with legal obligations, such as responding to requests from government authorities.
  • Legitimate Interests: To improve our services, secure our platform, and analyze usage trends.

HOW WE SHARE AND DISCLOSE INFORMATION

Costory may share your personal data as follows:

  • Service Providers: We engage third-party service providers to support our business operations, such as cloud hosting and data analytics. These providers process data on our behalf and are bound by contractual obligations to protect your data.
  • Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
  • Legal Requirements: We may disclose data to comply with legal obligations or to protect our rights and the rights of others.
  • Third-Party Integrations: If you integrate third-party services with our platform, we may share relevant data to facilitate these integrations.

DATA RETENTION

Costory retains personal data for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal obligations, resolve disputes, and enforce agreements. Customer data is retained based on the instructions provided by the customer, as defined in the Customer Agreement .

SECURITY

Costory implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, we cannot guarantee absolute security, especially during data transmission over the internet. You are responsible for safeguarding your credentials and using security measures like up-to-date antivirus software.

CHANGES TO THIS PRIVACY POLICY

Costory may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will notify you of significant changes via email or through our platform, and your continued use of our services after such notification constitutes acceptance of the updated policy.

INTERNATIONAL DATA TRANSFERS

Costory may transfer your personal data to countries outside the European Economic Area (EEA), including to service providers in the United States. We ensure that such transfers comply with applicable data protection laws by using appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

YOUR RIGHTS

You have the right to access, rectify, complete, restrict, oppose and delete your personal data, as well as to data portability. You may exercise the rights above by contacting Costory at: dpo@costory.com. If you decide to exercise these rights, your access to Costory’s services or the job application process, as relevant, may be affected.

The website may provide links to or the ability to connect with non Costory’s websites, services, social networks or applications. Clicking on those links or enabling those connections may allow the third party to collect or share information about you. Those third-party websites or services are beyond our control. Costory encourages you to check the privacy policies and terms of use of any non Costory’s websites or services before providing your personal data to them.

CONTACTING COSTORY

If you have any questions about this Privacy Policy or Costory’s data practices, please contact us at dpo@costory.com or at our postal address:

Costory SAS
282 rue des Pyrénées,
75020, Paris,
FRANCE