Privacy Policy

1. Definitions

• Namirasoft: Namira Software Corporation.
• Service: Namirasoft Bill Watch.
• Namirasoft Services: the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you and governs identity across Namirasoft Services.
• Watch: a configuration you create to monitor the cost of a cloud account, including the provider, the account, what to analyze, its schedule, and where to send alerts.
• Rule: the conditions you define that determine when a change in cost is treated as unusual.
• Cloud Account: the AWS, Azure, or Google Cloud account whose cost a Watch monitors.
• Workspace: a grouping of products and data, created and managed in Namirasoft Workspace, used to organize your Watches.
• Personal Information: information that identifies, relates to, or can reasonably be linked to an identifiable individual, including you.
• Processing: any operation performed on information, such as storing, analyzing, or organizing it.

2. Namirasoft Account

Access to Namirasoft Bill Watch requires a Namirasoft Account. You register and sign in through Namirasoft Account, which authenticates your identity. Your identity, login, device and network details, and any other personal information associated with your Namirasoft Account are collected and handled by Namirasoft Account under the Namirasoft Account Privacy Policy, not by this Service. Namirasoft Account also issues any Service User you use, a non-human identity such as an application or AI agent for automated access, which is created and handled under that same policy. Namirasoft Account establishes these identities, while the access that lets another user or a Service User act in Namirasoft Bill Watch is granted and managed through Namirasoft Access and handled under the Namirasoft Access Privacy Policy.

3. Information We Collect

To provide the Service, Namirasoft Bill Watch processes:

• Account identifiers received from Namirasoft Account, used to associate your Watches with you and show you your own Watches.
• Watch configurations you create, including the provider and the identifier of the account you are monitoring, which is your AWS account number, your Azure subscription identifier, or your Google Cloud billing account and project identifiers, together with what to analyze, the periods and settings, references to the credential used to connect and to where alerts and logs are sent, and the Workspace and any categories, tags, or field values you add.
• Rules you define, including the conditions that determine when a change is treated as unusual.
• Cost and usage information that a Watch reads from your Cloud Account, which the Service keeps as a cost history so it can analyze changes over time, together with the results of each check, such as when it ran, whether an unusual change was found, and a short message about the result. Where you choose to analyze by dimension, this information is broken down the way your provider reports it, for example by service, region, availability zone, instance type, usage type, platform, purchase type, tenancy, or operation, so the figures describe the shape of your spending rather than only a single total.
• API call counts, where you enable that option, so a Watch can report how many API calls it made to your provider and apply the API call limits you set.

How a Watch connects. To check a Cloud Account, Namirasoft Bill Watch connects to it using the credential you keep in Namirasoft Credential and reads the account’s cost and usage information from the provider. You grant that access yourself in your provider’s console, and it is read-only and limited to billing information. For AWS, the credential is an access key for a user whose only permissions are reading cost and usage, viewing billing, and viewing budgets and report definitions. For Azure, you assign the Cost Management Reader role, which gives read-only access to billing information and no ability to change resources. For Google Cloud, you give a service account the Billing Account Viewer role, which allows viewing billing and cost information and cannot change billing or resources. With this access the Service reads only cost and usage information for the purpose of analyzing it, and it does not read the content of the workloads, data, or resources in your Cloud Account. The permissions each provider needs are listed in full in the console guide for AWS, Azure, and Google Cloud.

What an alert contains and where it goes. When a Watch runs, it records the result in the log group you choose in Namirasoft Log, and it sends the alert to the topic you choose in Namirasoft Notification Sender. The alert describes the finding, so it can include the name of the Watch, the account it monitors, the period examined, what was measured, the cost figures involved, and the rule and threshold that were met. From that topic, the alert is delivered to the subscribers you configure, through the Namirasoft Sender products you select, such as email, SMS, Slack, Microsoft Teams, or Telegram. Those products deliver through the providers you set up for them, so your cost figures travel to the destinations and channels you choose, each under its own policy. You decide which topic and log group a Watch uses, and you can also have a Watch send you a daily confirmation when it finds nothing, and a daily notice while it is inactive so you know it is not monitoring, so these messages are the ones you asked for.

4. Information We Do Not Collect

Namirasoft Bill Watch does not:

• collect your Namirasoft Account password or sign-in credentials, which are handled by Namirasoft Account;
• store the keys or secrets used to connect to your Cloud Accounts; these are held in Namirasoft Credential and Namirasoft Secret and referenced;
• make any change in your Cloud Accounts, since its access is read-only and is used only to read cost and usage information;
• read, change, or store the content of the workloads, data, or resources in your Cloud Accounts; it reads only cost and usage information to analyze it, and only through the access you grant it, so grant the access described in the console guide for your provider and nothing beyond it;
• process payments or charge you, which are handled by Namirasoft Payment under its own Privacy Policy; and
• use your cost information for advertising, or sell it.

5. Consent and Legal Grounds

Namirasoft generally collects, uses, and discloses your Personal Information with your knowledge and consent, which may be express or implied depending on the sensitivity of the information and the circumstances. When you first use Namirasoft Bill Watch, you agree to this Privacy Policy and the Terms of Service, which is how you give your consent to the handling of your Personal Information described here, and you can withdraw it as described in section 6. In some cases, applicable law allows or requires us to handle Personal Information without consent, for example to provide a service you have requested, for security, fraud prevention, technical operation, or legal compliance, or where otherwise permitted or required by law. Where our activities are also subject to laws that use a legal basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above to: run the Watches you configure; connect to your Cloud Accounts to read cost and usage information and analyze it; apply the Rules you define and detect unusual changes; raise alerts and keep the cost history and the results of each check so you can review them; maintain the security and integrity of the Service; and diagnose problems and improve its reliability. We do not use your cost information for advertising.

8. Automated Decision-Making

Namirasoft Bill Watch analyzes the cost and usage information a Watch reads and applies the Rules you define to decide whether a change is unusual, then raises an alert. A Rule compares the figures using the formula you choose, the change type you select, and the threshold you set, and each formula is described in the List of Formulas. This analysis follows the Rules you set; the alerts it raises are operational signals for you, not decisions that produce legal or similarly significant effects about you, and the Service does not profile you or take automated actions on your behalf.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information. We share information only as follows:

• Within Namirasoft Services so that a Watch can connect using Namirasoft Credential, deliver alerts through Namirasoft Notification Sender, and record activity in Namirasoft Log;
• With your cloud providers, to the extent needed to read your cost and usage information from your Cloud Accounts, under their own terms;
• Service providers that host or secure our infrastructure, bound by confidentiality and permitted to use the information only to provide their services to us;
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy;
• At your direction or with your consent when you ask us to share information or otherwise agree;
• Aggregated or de-identified information that cannot reasonably identify you.

10. International Transfers

Namirasoft is based in Canada, and your information may be processed in Canada and in other countries where we or our service providers operate. We handle information in accordance with applicable Canadian privacy laws, including PIPEDA and applicable provincial privacy legislation, and we take steps intended to ensure your information remains protected when it is processed in another country. Where required by applicable law, we use appropriate safeguards for such transfers. Because privacy laws differ between countries, information processed in another country may be subject to that country’s laws.

11. Security Commitment

Namirasoft maintains administrative, technical, and organizational measures to protect Personal Information within the Service against unauthorized access, disclosure, alteration, misuse, loss, or destruction. These measures may include access controls, authentication protections, encryption in transit, monitoring, logging, and operational safeguards appropriate to the nature of the information processed, and we continually review and strengthen them. Because the credentials used to connect to your Cloud Accounts are held in Namirasoft Credential and Namirasoft Secret rather than by this Service, they are protected there. You also help keep your information safe by keeping your Namirasoft Account credentials and tokens confidential, granting each Watch only the access it needs, and protecting activity performed under your account.

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law.

12. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements. Namirasoft Bill Watch keeps your Watch configurations, Rules, cost history, and the results of each check for as long as your Namirasoft Account exists, or as needed to provide the Service, so that your monitoring stays in place and you can review its results. You can create, change, and delete your Watches and Rules at any time through the Service. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy. When you delete a Watch or Rule, or when your records are removed because your Namirasoft Account is deleted, the information is removed from active use and then permanently erased by our automated systems; because of system dependencies and backups, complete erasure can take from moments to several months, and copies may remain in secure backups until they are replaced in the ordinary course.

13. Data Integrity and Responsibility

You decide which Cloud Accounts to watch, what to analyze, and the Rules that define an unusual change, and you are responsible for those choices and for being authorized to connect to the Cloud Accounts you configure. Namirasoft Bill Watch reads and analyzes the cost and usage information as reported by your cloud providers; Namirasoft is not responsible for the accuracy, completeness, or timeliness of that information, which originates from the providers, and the cost figures the Service shows are for monitoring and may differ from an authoritative bill. Your cloud providers are separate companies, and their handling of your Cloud Account, including their own records of access to it, is governed by their own terms and privacy policies.

14. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view, edit, and delete your Watches and Rules in the Service at any time. For other requests, contact us and we will handle them in accordance with applicable law, which may include retaining a record where we have a legitimate or legal basis to do so. Because the credentials are held in Namirasoft Credential and your cost data originates from your cloud providers, requests concerning those are carried out by the responsible Service or provider, and where appropriate we will coordinate the request. For identity and account rights, use Namirasoft Account.

To make a request, contact us using the options in the Contact Us section at the bottom of this page. To protect your information, we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

15. Children’s Privacy

The Service is not directed to individuals under 18. Eligibility and accounts are managed by Namirasoft Account; if Namirasoft Account determines that an account belongs to a person under 18, the account and its information are handled under the Namirasoft Account Privacy Policy.

16. Communications

When a Watch detects an unusual change, Namirasoft Bill Watch raises the alert and sends it to the topic you chose in Namirasoft Notification Sender, which delivers it to the destinations you configured through the applicable Sender products, under their own terms and privacy policies. Namirasoft Bill Watch raises these alerts but does not deliver them, and the destinations you configure are used only for the alerts your Watches raise. When we need to contact you about your account or the services you use, we send the message to the verified email address on your Namirasoft Account, the address you signed up with and verified there.

17. Cookies and Tracking

The Service uses cookies that are strictly necessary to sign you in and operate it, such as the cookies used to maintain your authenticated session, together with Google Analytics cookies that help us understand how it is used. Google Analytics is operated by Google under its own privacy terms. You can manage cookies through your browser settings.

18. Accountability and Privacy Contact

Namirasoft is responsible for the Personal Information under its control and takes steps to ensure that such information is handled in accordance with this Privacy Policy and applicable privacy laws. Namirasoft has designated a person accountable for its compliance with this Privacy Policy, and their identity is available on request.

Questions, requests, or concerns regarding Namirasoft’s privacy practices or the handling of Personal Information may be submitted using the contact options in the Contact Us section at the bottom of this page.

19. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint using the contact options in the Contact Us section at the bottom of this page. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

20. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or legal requirements. When we make changes, we revise the effective date and post the updated Policy here. For minor or clarifying updates, your continued use of the Service after the updated Policy is posted indicates your acceptance of it. Where a change materially affects how we collect, use, or disclose your Personal Information, we will show you what has changed and ask you to review and agree to the updated Privacy Policy and Terms of Service before you continue using the Service. If you do not agree with an updated Policy, you may stop using the Service and request deletion of your Account.

Contact Us

For questions, comments, requests, or concerns regarding this Privacy Policy or information practices relating to Namirasoft Bill Watch, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.