Last updated: July 2026
These Terms of Service ("Terms") govern your access to and use of Cloud Cost Analyzer ("CCA", the "Service"), operated by DragonFractal ("Company", "we", "us", "our"). By creating an account, clicking "I agree", or using the Service, you agree to these Terms. If you use the Service on behalf of an organization, you represent that you have authority to bind that organization.
CCA helps you find cost-savings and efficiency opportunities in your cloud infrastructure. It runs in two modes:
Findings are produced by a deterministic rules engine. The Service does not currently use artificial intelligence or machine-learning models to generate findings. If we introduce AI-assisted features in the future, Section 10 applies to them. CCA uses read-only access to your cloud accounts and never creates, modifies, or deletes resources in your cloud environment.
You agree to provide accurate registration information, keep your credentials and API keys secure, promptly report any unauthorized access, and be at least 18. You are responsible for all activity under your account.
You agree not to:
Paid plans are billed through Stripe on a monthly or annual cycle and renew automatically until cancelled. You may cancel anytime; cancellation takes effect at the end of the current billing period, and fees already paid are non-refundable except where required by law. We may change pricing on 30 days' notice; changes do not apply to your current billing period.
Your data. You retain all ownership of your cloud infrastructure data and the findings generated from it. You grant us a limited license to process your data solely to provide the Service and to generate aggregated, de-identified statistics to operate and improve the Service. We do not sell your data, share it with other customers, or use it to train machine-learning models.
Our property. The Service, including its rules, rule bundles, algorithms, source code, and branding, is our property. Use of the CLI or a license does not transfer ownership of the underlying technology. You may not copy, modify, or distribute the rules or rule bundles, or remove proprietary notices.
What we receive. In Managed mode, the CLI transmits cloud resource metadata, utilization metrics, and cost data over TLS to our backend.
What we do not persist. This raw collected data is evaluated in memory and is not written to our database. Our application logs record only counts and metadata, never raw resource data.
What we persist. We store the resulting findings and scan summaries. Findings include the identifiers of the specific resources they concern and the supporting metrics for those resources, along with account, billing, and usage records. Retention periods are described in our Data Retention Policy.
Credentials. The CLI authenticates to your cloud accounts using credentials you supply through your local environment (for example, your AWS profile or an IAM role). We do not store your cloud provider credentials. You are responsible for providing least-privilege, read-only credentials and for rotating or revoking them.
Air-Gapped mode. In Air-Gapped mode, your resource data is analyzed locally on your systems and is not transmitted to us. See our Privacy Policy for full detail.
The Service relies on Amazon Web Services (hosting and infrastructure), Stripe (payment processing), and Amazon SES (transactional email). Analysis of your environment uses the cloud provider APIs you direct us to (AWS, Azure, and where offered, GCP). We are not responsible for the acts, outages, pricing, or API changes of these third parties. Enterprise customers requiring a Data Processing Addendum may contact legal@dragonfractal.com.
We maintain reasonable, industry-aligned safeguards, including: encryption in transit (TLS) and at rest, API keys and refresh tokens stored only as hashes, passwords hashed with Argon2, network isolation of our database in private subnets, and per-endpoint rate limiting. No security is perfect; we do not warrant that the Service will be uninterrupted, error-free, or immune from unauthorized access. We will notify you of a security incident affecting your data without undue delay and as required by applicable law.
We strive for high availability but do not guarantee uninterrupted service, and the base Service is provided without any SLA or uptime commitment. The Service may be unavailable due to maintenance, third-party outages, or incidents. Enterprise customers may obtain uptime commitments only under a separate, signed Service Level Agreement; nothing in these Terms creates an SLA.
10.1 Informational only. All findings, recommendations, savings estimates, and reports are informational and advisory only. They are not professional, financial, tax, security, legal, or engineering advice. They may be incomplete, may contain errors, and may become outdated as your environment or provider pricing changes.
10.2 You decide and you validate. You are solely responsible for independently reviewing, testing, and validating any recommendation before acting on it, and for all change management in your own environment. Any change to your cloud infrastructure is your decision and your action; we never make changes for you. You assume all risk arising from implementing (or not implementing) a recommendation, including performance degradation, data loss, downtime, or increased cost.
10.3 Not a security or compliance assessment. The Service is not a security audit, penetration test, or compliance certification. Security-related findings are non-exhaustive, and the absence of a finding is not assurance that your environment is secure or compliant.
10.4 AI features (if and when offered). If we introduce AI-assisted features, their outputs may be inaccurate, incomplete, or non-unique, must be independently reviewed by you before use, and must not be relied upon as a sole source of truth or as professional advice. We will update our subprocessor disclosures to identify any AI provider that processes your data.
10.5 Savings estimates. Savings figures are estimates derived from third-party pricing and your point-in-time data. They are not guarantees. Actual savings will differ, and may be zero or negative. Estimates do not reflect negotiated, custom, or committed-use pricing.
10.6 Third-party data. Findings depend on data and APIs from your cloud providers, which we do not control and do not warrant as accurate, complete, or current. Provider pricing, APIs, features, and behavior may change at any time; we are not responsible for such changes or for the effect of incomplete or delayed provider responses.
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT FINDINGS ARE ACCURATE OR COMPLETE, OR THAT ANY SAVINGS WILL BE ACHIEVED.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOST PROFITS, LOST REVENUE, LOST OR ANTICIPATED SAVINGS, LOST OR CORRUPTED DATA, OR BUSINESS INTERRUPTION, ARISING FROM OR RELATED TO THE SERVICE OR THESE TERMS, EVEN IF ADVISED OF THE POSSIBILITY.
OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING FROM OR RELATED TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID US FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR (B) US $100.
The exclusions and cap above do not apply to your payment obligations, your indemnification obligations, either party's breach of confidentiality, or liability that cannot be limited under applicable law.
You will defend, indemnify, and hold us harmless from claims, damages, and expenses (including reasonable legal fees) arising from: your use of the Service; your violation of these Terms or of law; your cloud content, configuration, and infrastructure changes; scanning any account without authorization; or your infringement of third-party rights. We will defend you against third-party claims that the Service, as provided by us and used in accordance with these Terms, infringes that party's US intellectual-property rights, subject to standard exclusions (your modifications, combinations, or content).
Either party may terminate at any time. You may delete your account in Settings. We may suspend or terminate access for violation of these Terms, non-payment after notice, or activity threatening the Service's security. On termination, your access is revoked, API keys are invalidated, and your data is deleted per the Data Retention Policy. Sections 3, 5, 11, 12, 13, 15, 16, and 17 survive termination.
You represent that you are not located in an embargoed country or on a US restricted-party list (including the SDN and Entity Lists), and that you will not use or export the Service in violation of applicable US export-control and sanctions laws.
These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-law principles. Any dispute arising out of or relating to these Terms or the Service will be resolved exclusively in the state or federal courts located in Delaware, and each party consents to that jurisdiction and venue. Notwithstanding the foregoing, either party may seek injunctive or equitable relief in any court to protect intellectual property or confidential information.
Each party may access the other's non-public information ("Confidential Information"), including your cloud data and findings and our rules, pricing, and technical information. Each party will use the other's Confidential Information only to perform under these Terms and will protect it with at least reasonable care. This does not apply to information that is public through no fault of the recipient, independently developed, or required to be disclosed by law (with notice where permitted). Your cloud data and findings are your Confidential Information.
We may update these Terms. We will give notice of material changes by email or dashboard notice at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.
Questions about these Terms? Contact us at legal@dragonfractal.com.