Privacy Policy

1. Introduction

This Privacy Policy describes how Outperform Ventures LLC dba TrainMyAgent ("Company," "we," "us," or "our") collects, uses, and protects information when you use the CostHawk platform, website, APIs, and related services (the "Service").

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials through our identity provider (Clerk). We may also collect your organization name and team membership details.

2.2 API Usage Metadata

We collect usage metadata from your connected AI providers, including: token counts, model identifiers, timestamps, cost amounts, and API key identifiers. This data is used to provide cost monitoring and analytics.

2.3 MCP Telemetry Data

If you install our MCP server, telemetry is computed locally on your machine from session files (e.g., ~/.claude/projects, ~/.codex/sessions) before anything is transmitted. We collect only usage metadata: token counts, model names, timestamps, and hashed project identifiers. We do not collect, transmit, or store prompt content, code, or file contents.

2.4 Wrapped Proxy Requests

If you use wrapped proxy keys, your API requests transit our servers in memory to be forwarded to the upstream provider. We log only metadata (token counts, model, cost, timestamp). We do not store, log, or inspect the content of prompts or responses.

2.5 Automatically Collected Data

We collect standard web analytics data including IP addresses, browser type, device information, and pages visited. We use this data to improve the Service and troubleshoot issues.

3. What We Do Not Collect

We want to be explicit about what we do not collect or store:

• Prompt or completion content from any data path
• Source code or file contents from your projects
• Plaintext copies of your API keys (keys are encrypted at rest)
• Conversation history or chat logs

4. How We Use Your Data

We use collected information to:

• Provide, maintain, and improve the Service
• Display cost dashboards, analytics, and reports
• Send budget alerts and notifications you configure
• Respond to support requests
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

5. Data Security

We take the security of your data seriously:

• Admin API keys are encrypted at rest using AES-256-GCM with unique initialization vectors per key
• Wrapped proxy keys use envelope encryption with AES-256-GCM
• All data is transmitted over TLS/HTTPS
• Database access is restricted and monitored
• Authentication is managed through Clerk with industry-standard practices

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers that help us operate the Service (e.g., hosting, authentication, email delivery), under contractual obligations to protect your data
• Law enforcement when required by law, subpoena, or court order
• Business transfers in connection with a merger, acquisition, or sale of assets, with notice to affected users

7. Leaderboard

The CostHawk leaderboard is entirely opt-in. If you choose to participate, only the display name you set and aggregate token counts are shown publicly. Your real identity, email, and detailed usage data are never exposed on the leaderboard. You can opt out at any time.

8. Data Retention

We retain your account information and usage metadata for as long as your account is active. If you delete your account, we will remove your personal data within thirty (30) days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at help@costhawk.ai. We will respond within thirty (30) days.

10. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings.

11. Children's Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. International Data Transfers

Your data may be processed in the United States. By using the Service, you consent to the transfer and processing of your data in the United States, which may have different data protection laws than your jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service at least thirty (30) days before they take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy, contact us at:

Outperform Ventures LLC dba TrainMyAgent
Email: help@costhawk.ai