🔒 Privacy Policy & Security

📋 Introduction

Welcome to BigQuery Cost Analyzer ("we," "our," or "the Service"). This Privacy Policy explains how we collect, use, protect, and handle your information when you use our BigQuery cost analysis and optimization service.

By using our Service, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service immediately.

📊 Information We Collect

1.1 Authentication Information (via Google OAuth)

When you log in using Google OAuth 2.0, we collect:

• Google Account Email: To identify you and personalize your experience
• Profile Information: Name and profile picture (if provided by Google)
• OAuth Access Token: Temporary token (expires in 1 hour) to access BigQuery on your behalf

1.2 BigQuery Project Information

You may choose to provide:

• Project IDs: GCP projects you want to analyze
• Dataset Names: BigQuery datasets for cost analysis
• Configuration Settings: Your preferences for alerts and thresholds

1.3 Usage Data (Automatically Collected)

• Log Data: IP address, browser type, access times
• Feature Usage: Which features you use and when
• Error Logs: Technical errors to improve service reliability

🔐 OAuth 2.0 Security Model

How OAuth Protects You:

OAuth Permissions We Request:

• https://www.googleapis.com/auth/bigquery - Read and query your BigQuery data
• https://www.googleapis.com/auth/cloud-platform - Access Google Cloud Platform resources

You see these permissions when you log in and can deny them. We cannot access anything beyond what you explicitly authorize.

🔄 Two Access Models: Choose Your Level

We offer two ways to use our service, giving you control over your data:

Model 1: OAuth Only (Most Secure) ✅ RECOMMENDED

Model 2: OAuth + Optional Server-Side Analysis ⚠️ OPTIONAL

⚙️ How We Use Your Information

We use collected information to:

1. Provide the Service: Execute BigQuery cost analysis and optimization
2. Authenticate You: Verify your identity via Google OAuth
3. Send Alerts: Notify you of cost spikes (if you enable this feature)
4. Improve the Service: Analyze usage patterns to enhance features
5. Troubleshoot Issues: Debug errors and technical problems
6. Comply with Legal Obligations: Respond to legal requests when required

💾 Data Storage, Retention & Security

What We Store:

Security Measures:

• 🔒 Encryption in Transit: All data transmission uses HTTPS/TLS encryption
• 🔐 Encryption at Rest: Firebase and Google Cloud Platform encrypt stored data
• 🚪 Access Controls: Limited employee access with audit logging
• 🔑 OAuth Security: Industry-standard authentication protocol
• 🛡️ Regular Security Audits: Ongoing monitoring for vulnerabilities

⚖️ Your Rights & Control

You have the following rights regarding your data:

1. Access & Portability

You can request a copy of all data we have about you. Contact us at: support@bigquerycostanalyzer.com

2. Correction

You can update your profile information anytime through the Service.

3. Deletion (Right to be Forgotten)

You can request account deletion by:

• Logging out and requesting deletion via email
• Revoking OAuth access from your Google Account settings

We will delete your data within 30 days, except where required by law to retain it.

4. Revoke BigQuery Access

OAuth Access: Revoke from Google Account Permissions

Service Account Access (if granted): Remove our service account from your GCP IAM settings

5. Opt-Out of Alerts

You can disable email/SMS alerts anytime through the Service settings.

6. Data Portability

Request your data in a machine-readable format (JSON) by contacting us.

🤝 Data Sharing and Disclosure

Who We Share Data With

We share limited data with the following parties solely for operational purposes:

Data Processing, Not Selling

The data shared with third parties is used exclusively to:

• ✅ Provide the core functionality of our service
• ✅ Process your queries and generate cost predictions
• ✅ Store your preferences and settings
• ✅ Send alerts you explicitly request
• ✅ Improve service performance and reliability

We Do NOT Share:

• ❌ Your actual BigQuery data content or query results
• ❌ Your billing information or payment details
• ❌ Your data with advertisers or marketers
• ❌ Your data for purposes unrelated to service functionality
• ❌ Personal information without your explicit consent

Legal Disclosure

We may disclose your information if required by law, such as:

• In response to valid legal requests (subpoenas, court orders)
• To protect our rights, property, or safety
• To protect the rights, property, or safety of our users or others
• To prevent fraud or security issues

🔗 Third-Party Services

We use the following third-party services:

Note: These third-party services have their own privacy policies. We encourage you to review them.

👶 Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

🌍 International Users & Data Transfers

Our Service is hosted on Google Cloud Platform, which may store data in various regions worldwide. By using the Service, you consent to the transfer of your data to these locations.

GDPR Compliance (EU Users): If you are in the European Economic Area (EEA), you have additional rights under GDPR, including:

• Right to access your personal data
• Right to rectification and erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

⚖️ Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Consent: You explicitly consent by logging in with OAuth and granting permissions
• Contract: Processing necessary to provide the Service you requested
• Legitimate Interests: Improving service quality and security (balanced against your privacy rights)
• Legal Obligation: Compliance with applicable laws and regulations

📝 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date at the top
• Sending an email notification (for significant changes)

Your continued use of the Service after changes constitutes acceptance of the updated policy.

⚠️ Limitation of Liability

To the maximum extent permitted by law:

1. No Warranty: We make no warranties regarding the accuracy, reliability, or availability of cost predictions or analysis
2. Your Responsibility: You are solely responsible for your BigQuery costs and usage decisions
3. No Liability for Costs: We are not liable for any BigQuery costs incurred based on our analysis or recommendations
4. Data Security: While we use industry-standard security, we cannot guarantee absolute security
5. Third-Party Actions: We are not responsible for actions of third parties (Google, Firebase, etc.)
6. Service Interruptions: We are not liable for service downtime or interruptions

Maximum Liability: Our total liability shall not exceed the fees paid by you (if any) in the 12 months preceding the claim.

🛡️ Indemnification

You agree to indemnify and hold harmless BigQuery Cost Analyzer, its operators, and affiliates from any claims, damages, or expenses arising from:

• Your use or misuse of the Service
• Your violation of this Privacy Policy or Terms of Service
• Your violation of any third-party rights
• Any BigQuery costs incurred in your projects

📧 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

For security vulnerabilities, please email: security@bigquerycostanalyzer.com

✅ Your Acceptance