Privacy Policy

1. Introduction

Funky Pug, LLC ("Company," "we," "us," or "our"), a Wyoming limited liability company, operates CostFunction (the "Service"), a software-as-a-service platform for analyzing, testing, and tracking costs associated with third-party Large Language Model (LLM) services.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service. It also explains your rights regarding your personal information and how you can exercise those rights.

BY USING THE SERVICE, YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICE.

This Privacy Policy should be read in conjunction with our Terms of Service, which governs your use of the Service.

2. Information We Collect

We collect several types of information from and about users of our Service. Understanding what we collect helps you make informed decisions about your use of our Service.

2.1 Information You Provide Directly

Account Registration Information: When you create an account, we collect your email address, name, and password. Passwords are cryptographically hashed using industry-standard algorithms and are never stored in plaintext.

Payment Information: If you subscribe to a paid plan, we collect billing information including your name, billing address, and payment card details. Payment card information is processed and stored by our third-party payment processor (Stripe) and is not stored on our servers.

Communications: When you contact us for support or other inquiries, we collect the content of your communications along with your contact information.

2.2 API Keys and Credentials

When you use our Bring Your Own Key (BYOK) feature, you may provide us with API keys for third-party LLM services. Here's how we handle these sensitive credentials:

• Storage: Your API keys are stored using AES-256 encryption. Encryption keys are stored separately from encrypted data.
• Access: Your API keys are decrypted only when necessary to make API calls on your behalf.
• Transmission: All API key transmissions occur over HTTPS/TLS encrypted connections.
• Usage: We use your API keys solely for making API calls to third-party LLM providers on your behalf.
• Logging: We do not log your actual API keys.

2.3 Information Collected Automatically

When you use our Service, we automatically collect certain information about your device and usage, including device type, operating system, browser type, IP address, pages viewed, and actions taken within the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account
• To authenticate your access to the Service
• To process your API requests to third-party LLM providers
• To calculate token counts and cost estimates
• To process payments and manage subscriptions
• To provide customer support
• To improve and optimize the Service
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations

4. How We Share Your Information

We do not sell your personal information.

We share your information only in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including hosting (Vercel), payment processing (Stripe), and analytics providers.

4.2 Third-Party LLM Providers

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. API Key Security

Given the sensitive nature of API keys, we implement robust security measures:

Your Responsibilities: We strongly recommend creating dedicated API keys for use with CostFunction, setting rate limits and spending caps, and regularly rotating your keys.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes for which it was collected:

• Account Information: Retained for as long as your account is active
• API Keys: Deleted within 30 days upon account deletion
• Usage Data: Retained for 12 months for analytics and billing
• Log Data: Generally retained for 90 days

7. Your Rights and Choices

You have the right to:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a machine-readable format
• Opt-out: Opt out of marketing communications at any time
• API Key Deletion: Delete your stored API keys at any time through the Service interface

To exercise any of these rights, please contact us at support@costfunction.cc.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, and the right to opt-out of sale.

We do not sell your personal information.

9. International Data Transfers

Funky Pug, LLC is based in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" and notify you by email at least 30 days before the changes take effect.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: