DRAFT — this Privacy Policy requires legal review
This document has not yet been signed off by counsel. Do not rely on it as a binding agreement until this banner is removed.
Privacy Policy
Last updated: June 11, 2026
At Refine, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
1. Collection of Your Information
We may collect information about you in a variety of ways. The information we may collect via the Site includes:
1.1 Personal Data
Personally identifiable information, such as your name, email address, and telephone number, that you voluntarily give to us when you register with the Site or when you choose to participate in various activities related to the Site. You are under no obligation to provide us with personal information of any kind, however your refusal to do so may prevent you from using certain features of the Site.
1.2 AWS Cost and Usage Data
When you upload your AWS Cost and Usage Reports or connect your AWS account to our service, we collect information about your AWS usage, costs, and resource allocation. This data is used solely for the purpose of providing you with cost optimization recommendations.
1.3 Derivative Data
Information our servers automatically collect when you access the Site, such as your IP address, browser type, operating system, access times, and the pages you have viewed directly before and after accessing the Site.
2. Use of Your Information
Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:
- Create and manage your account.
- Provide you with AWS cost optimization recommendations.
- Email you regarding your account or order.
- Fulfill and manage purchases, orders, payments, and other transactions related to the Site.
- Generate a personal profile about you to make future visits to the Site more personalized.
- Increase the efficiency and operation of the Site.
- Monitor and analyze usage and trends to improve your experience with the Site.
- Notify you of updates to the Site.
3. Disclosure of Your Information
We may share information we have collected about you in certain situations. Your information may be disclosed as follows:
3.1 By Law or to Protect Rights
If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
3.2 Third-Party Service Providers
We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.
3.3 Business Transfers
If we or our subsidiaries are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site of any change in ownership or uses of your personal information.
4. Security of Your Information
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information.
5. Data Retention
We retain your AWS cost and usage data for 90 days (configurable) by default. You can adjust the retention period at any time from the Settings page in your account. Bill files uploaded through the Upload Bill flow are deleted after the analysis completes; only the resulting analysis is retained, subject to the same retention period.
6. AWS Access
When you connect your AWS account, Refine accesses it exclusively through a read-only IAM role that you create and control. This role allows Refine to read cost, usage, and configuration metadata; it cannot modify resources in your account, and we never hold your AWS credentials. You can revoke the role at any time from your AWS console, which immediately ends our access.
7. AI Processing
Gen-AI narrative reports in the Service are generated using OpenAI, a sub-processor located in the United States. A migration to Amazon Bedrock is planned; this policy and our sub-processor list will be updated when it completes. AI-generated reports are informational and may contain errors.
8. Your Rights Regarding Your Information
8.1 Account Information
You may at any time review or change the information in your account or terminate your account by:
- Logging into your account settings and updating your account
- Contacting us using the contact information provided below
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with legal requirements.
8.2 Your Rights Under GDPR / CCPA
Depending on where you live, you may have rights under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or similar laws, including the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete personal information
- Request deletion of your personal information
- Receive a copy of your personal information in a portable format
- Object to or restrict certain processing of your personal information, or opt out of the sale or sharing of personal information where applicable
To exercise any of these rights, email us at info@habilelabs.io. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights. You also have the right to lodge a complaint with your local data protection supervisory authority.
9. Contact Us
If you have questions or comments about this Privacy Policy, please contact us at:
HabileLabs
Mansarovar
Jaipur
Email: info@habilelabs.io
This privacy policy was last updated on June 11, 2026.