UnitSense ("UnitSense", "we", "us") helps companies understand and control their AI spend. Cost data is sensitive, so we try to be plain about what we collect, why, and what we deliberately don't. This policy covers both this website (unitsense.ai and its subdomains) and the UnitSense product. Questions or requests: privacy@unitsense.ai.
Analytics. We use PostHog (served through our own subdomain) to understand how visitors use the site — pages viewed, approximate location from IP, browser and device type. If you arrive through a link we sent you, it may carry an identifier so we know the material reached you. We also use a visitor-analytics script from Clay to help us understand which companies visit the site, and Cloudflare Web Analytics, which is cookieless.
Things you give us. If you book a call (through our scheduling provider, Cal.com), request the handbook, or email us, we receive what you submit — typically your name, email, and company. We use it to respond and follow up; we don't add you to automated sequences without a clear reason to believe you'd want to hear from us, and every marketing email we send has a working way to opt out.
Preferences. Your light/dark theme choice is stored in your browser's local storage and never leaves your device.
Account data. Name, work email, company, and workspace settings — what we need to run your tenant and talk to you.
Usage metadata from the AI services you connect. When you connect providers (via admin APIs, our SDKs, our collector agent, or the optional UnitSense gateway), we collect the metadata needed to compute cost and attribution: token and request counts, model and provider names, costs and rates, latency, timestamps, and the attribution labels you configure (teams, applications, customers, features, seats).
Billing and revenue data you choose to connect. Provider invoices you upload for reconciliation, and — if you connect a revenue source such as Stripe — the aggregate amounts needed to compute margin. We don't need or want your customers' payment details, and we don't collect them.
What we deliberately don't store: prompt and response content. Our connectors and collector capture metadata, not content. When traffic flows through the optional gateway, request and response bodies pass through to your AI provider and are not persisted by us — we record the metadata listed above. If a future feature ever needed content-level access, it would be off by default and clearly labeled before you turned it on.
We do not sell your data. We do not use one customer's data to build benchmarks, train models, or market to anyone else.
Only service providers that help us run UnitSense, under their own contractual obligations: cloud hosting (AWS; this website is served via Cloudflare), email and productivity (Google Workspace), product analytics (PostHog), scheduling (Cal.com), and website visitor analytics (Clay). We'll share data if the law genuinely requires it, and if UnitSense is ever part of an acquisition, your data remains protected by this policy's commitments.
Data is stored in the United States, encrypted in transit. Product data is retained while your account is active; when you leave, we delete your tenant's data within 90 days of your request, apart from what accounting or legal obligations require us to keep. Website analytics is retained on our analytics provider's standard schedule.
We follow security fundamentals — encryption in transit, least-privilege access, isolated tenants, no content storage by design. We are an early-stage company and do not yet hold formal certifications; we are working toward SOC 2. If you need our current security posture in writing for a review, ask and we'll give you the real picture.
Email privacy@unitsense.ai to access, correct, export, or delete your personal data, or to object to a use of it. We answer every request, usually within days. If you're in the EEA or UK, you also have the rights the GDPR gives you — including complaint to your supervisory authority — and our legal bases are performance of contract (running the product), legitimate interests (running and improving the website and service), and consent where we ask for it. If you're a California resident, we don't sell or share personal information as the CCPA defines those terms.
UnitSense is a business product. It isn't directed at children under 16, and we don't knowingly collect their data.
If we change this policy in a way that matters, we'll update the date above and, for product customers, tell you directly. The current version always lives at unitsense.ai/privacy.