Last updated: October 28, 2026
1. Introduction
At Costory, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud cost management platform. Please read this privacy policy carefully.
2. Information We Collect
We collect information that you provide directly to us, including:
Account information (name, email, company name)
Cloud provider billing and usage data (no sensitive application data)
Communication preferences
Usage data and analytics about how you interact with our platform
3. How We Use Your Information
We use the information we collect to:
Provide, maintain, and improve our services
Generate cost reports and optimization recommendations
Send you technical notices and support messages
Respond to your comments and questions
Detect and prevent fraudulent or unauthorized activity
4. Data Security
We implement appropriate technical and organizational security measures to protect your personal information. All data is encrypted in transit and at rest. We use industry-standard security protocols and regularly audit our systems for vulnerabilities.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
6. Your Rights
Depending on your location, you may have the following rights:
Access and receive a copy of your personal data
Rectify inaccurate personal data
Request deletion of your personal data
Object to or restrict processing of your personal data
Data portability
7. Third-Party Services
Our platform integrates with third-party cloud providers (AWS, GCP, Azure) to collect billing data. We only access the minimum data necessary to provide our services. We do not sell your personal information to third parties.
8. Website Analytics, Advertising and Cookies
Our website, www.costory.io, uses the following analytics, advertising and marketing providers:
PostHog: website and product analytics (pages viewed, how visitors use the site). PostHog loads for every visitor and stores a first-party identifier in a cookie and in local storage. Its data goes through our own subdomain, user.costory.io, to PostHog’s EU servers.
Google Ads: an advertising tag that measures visits and conversions from our Google ads.
Reddit: an advertising pixel that measures visits and conversions from our Reddit ads. It sets the _rdt_uuid cookie.
Snitcher: identifies the company associated with a visitor’s IP address, so we know which companies visit our website. It stores a device identifier in a cookie and in local storage.
OpenAI: an advertising measurement pixel from OpenAI that records visits to our website.
Freebuff: a marketing measurement tag that records visits to our website.
lemlist: a website visitor tracking tag from lemlist, a sales outreach tool. It records visits to our website.
If you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, you see a cookie banner, and Google Ads, Reddit, Snitcher, OpenAI, Freebuff and lemlist load only after you accept marketing cookies. Elsewhere, they load by default. PostHog loads for all visitors. You can change your choice at any time with Cookie settings at the bottom of every page. When you withdraw consent, these providers stop loading and we remove the Reddit and Snitcher identifiers from your browser.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@costory.io or write to us at: Costory, Station F, 5 Parvis Alan Turing, 75013 Paris, France.