1. Overview

Ambral (“we,” “us,” or “our”) operates the website at ambral.dev and provides an open-source AI agent cost tracking platform. This Privacy Policy describes what information we collect, how we use it, and your choices regarding that information.

2. Information We Collect

2.1 Data You Send via the API

When you use the Ambral ingest API, you send us cost event data including agent identifiers, provider names, model names, token counts, cost amounts, and optional metadata. This data is stored in the database associated with your Ambral instance.

2.2 Self-Hosted Instances

If you self-host Ambral, all data stays on your own infrastructure. We have no access to your self-hosted data. This privacy policy applies only to the hosted service at ambral.dev.

2.3 Website Analytics

We may use Google Analytics to collect anonymous usage data about visitors to ambral.dev, including page views, referral sources, and device type. This data is aggregated and cannot identify individual users. You can opt out of Google Analytics by using a browser extension or disabling JavaScript.

2.4 Cookies

We use only essential cookies required for site functionality. We do not use advertising cookies or third-party tracking cookies.

3. How We Use Your Information

To provide and maintain the Ambral service
To display cost dashboards and analytics based on the data you submit
To send budget alert notifications when configured
To improve the service based on anonymous, aggregated usage patterns

4. Data Sharing

We do not sell, rent, or share your data with third parties. We do not use your submitted cost data for any purpose other than providing the service to you.

We may disclose information if required by law or to protect the safety and security of our users and service.

5. Data Retention

Cost event data is retained for as long as your account is active. You may delete your data at any time by removing records from the database. For self-hosted instances, data retention is entirely under your control.

6. Data Security

We use industry-standard security measures including encrypted connections (TLS), secure database access, and API key authentication for the ingest endpoint. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

You have the right to:

Access the data you have submitted
Request deletion of your data
Export your data at any time via the API
Self-host the platform to maintain full control over your data

8. Children's Privacy

Ambral is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

10. Contact

If you have questions about this Privacy Policy, contact us at support@ambral.dev.