Privacy Policy

What ModelBrake is

ModelBrake is a cost monitoring service for teams that use OpenAI, Anthropic, AWS Bedrock, and Vercel. We poll provider usage APIs with a read-only credential you give us and alert you when spend looks abnormal. We never proxy your API traffic and never see your prompts, completions, or model inputs/outputs.

What we collect

• Email address — used for account identity, sign-in (magic link), and alert delivery.
• Provider credentials (API keys, IAM role ARNs) — encrypted with AES-256-GCM at rest. We store only the ciphertext; the encryption key is held as an environment variable, never in our database. We display only the last 4 characters in the dashboard.
• Aggregated cost data — daily spend totals returned by provider usage APIs. This is dollar amounts and token counts, not prompt content.
• Payment information — handled entirely by Stripe. We store your Stripe customer ID and subscription ID; we never see or store card numbers.
• Waitlist submissions — email, optional role and provider selections, referrer, and user agent for anti-abuse.

What we do not collect

• Prompts, completions, or any model input/output.
• Application API keys (the keys your code calls models with). We only hold the read-only admin/usage key, which cannot invoke models.
• Cookies for tracking or advertising.

How we use your data

• Poll provider APIs for cost data on the schedule you expect (every 15 minutes for OpenAI, Anthropic, and Vercel AI Gateway; every 6 hours for Bedrock).
• Detect anomalies and spend ceiling breaches, then alert you via email and/or webhook.
• If you opt in to revoke-on-breach, use your separately provided write-scoped credential to disable an application key when a ceiling is crossed.
• Send account-related emails: sign-in links, alerts, onboarding, and (if you join the waitlist) an invitation when a spot opens.

Third-party processors

• Supabase — database and authentication (hosted in AWS us-east-1).
• Stripe — payment processing.
• Resend — transactional email delivery.
• Vercel — application hosting.
• AWS — for Bedrock cost polling via STS AssumeRole and Cost Explorer (cross-account, read-only).

We do not sell, rent, or share your data with anyone else.

Data retention and deletion

We retain your data for as long as your account is active. If you cancel your subscription, we delete your provider keys (including encrypted credentials) and usage snapshots within 30 days. Your email stays on file only for billing records required by law.

To request immediate deletion of all your data, contact us.

Security

Provider credentials are encrypted with AES-256-GCM before they reach the database. Authentication uses passwordless magic links (no passwords to leak). Row-level security policies ensure each account can only access its own data. All traffic is served over HTTPS.

Your rights

You can access, correct, or delete your personal data at any time through our contact page. If you are in the EU/EEA, you have additional rights under GDPR including data portability and the right to lodge a complaint with a supervisory authority.

Changes to this policy

We will email active account holders if we make material changes to how we handle data. The “last updated” date at the top reflects the most recent revision.

Contact

Questions about this policy? Get in touch.