Privacy & Data Handling

Effective 13 September 2026 · SpendSensai, an independent FinOps venture based in India

The short version. SpendSensai reads only your Azure cost and utilization metadata through a read-only role you grant and can revoke at any time. We never touch the contents of your resources, never store your credentials, and never sell, share, or use your data to train any model. We keep only what's needed to produce your report, and delete it on request.

Who we are

SpendSensai ("we", "us") is an independent FinOps venture based in India that provides read-only Azure cost audits. We are not a registered corporate entity at this time; we operate transparently and you can reach a real person at contact@spendsens-ai.com for any request about your data. We are not affiliated with, or endorsed by, Microsoft.

What we access

When you engage us for an audit, you grant a scoped Azure Reader role to a service principal or account we specify. That role lets us read:

Billing and cost-management line items (spend by resource, service, and subscription);
Resource inventory and configuration metadata (types, SKUs, tags, regions);
Utilization metrics exposed by Azure Monitor (e.g. CPU, memory, disk activity).

What we do NOT access

The contents of your databases, storage accounts, code, or key vault secrets;
Your Microsoft passwords or login credentials — authentication happens directly with Microsoft and we never see or store them;
Any ability to create, modify, or delete resources — the Reader role does not permit it.

Information you give us directly

When you submit the audit-request form, we collect your name, email, and any company/spend detail you choose to share. We use this only to contact you about your audit. It is handled by our form provider (Web3Forms) and delivered to us by email.

How we process and protect it

Transient processing. Cost and utilization data is analyzed to generate your report and is not retained beyond what's needed to prepare and discuss it with you.
No training, no resale. We never use your data to train machine-learning models, and we never sell or rent it to anyone.
AI assistant. Where our optional "Ask SpendSensai" assistant is used, questions and your report context are processed through Azure OpenAI within a private Azure environment; that data is not used by Microsoft or OpenAI to train their models.
Deletion. You can ask us to delete your audit data and contact details at any time and we will do so promptly.
Revoking access. You can remove the Reader role assignment in the Azure portal whenever you wish; our access ends immediately.

Sharing

We do not share your data with third parties except the minimal service providers needed to operate (e.g. our form and hosting providers), and only to the extent required to deliver the service. We may disclose information if legally compelled to do so.

Your choices

You may request access to, correction of, or deletion of your data, and you may withdraw from an audit at any time. Email contact@spendsens-ai.com and we'll act on it.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected here with a new effective date.