Privacy Policy

The short version

spaturzu is a service operated by Superchiu Ltd ("we", "us"), the data controller for the personal data described in this policy. spaturzu measures per-agent LLM cost from inside your own application. The SDK turns each LLM call into token counts and a computed cost and sends us only that — the metadata. We do notreceive your prompts, your messages, or the model's responses. We don't sell your data, and we use a small number of infrastructure providers purely to run the service.

spaturzu is in beta

The service — and this policy — are still being built. Data-retention periods, the subprocessors we use, and the wording here can change as we move toward general availability. When we make a material change, we'll update the date above. Please review it from time to time.

What we collect

When you use the spaturzu SDK, we receive only metadata about your LLM calls: token counts, computed cost, the model and provider name, the agent names, paths, and run identifiers you choose, any tags you add, the response status, latency, and timestamps.

To run your account we also store the email address you sign in with, your project and budget settings, and basic technical logs needed to operate and secure the service.

What we never receive

We do notreceive, log, or store the content of your prompts, your system prompts, your messages, or the model's responses. The SDK measures that text inside your own process, converts it to token counts, and sends only the counts — the prompt and response themselves never reach us. Your LLM provider (such as Anthropic or OpenAI) receives your prompts directly, using your own API key; spaturzu is not in that path.

How we use it

We use the metadata above only to provide spaturzu: to compute and display your per-agent and per-run cost, to power budgets and to send the alerts you configure, to operate and secure your account, and to send transactional email such as sign-in links. We do not use your data to build advertising profiles, and we do not use the content of your LLM calls for anything — because we never have it.

Who we share it with

We do not sell your data, and we do not share it with third parties for their own purposes. We rely on infrastructure providers (subprocessors) — currently Amazon Web Services, for hosting and for sending transactional email such as sign-in links and budget alerts — solely to operate spaturzu on your behalf. We may also disclose data if required by law, or to protect the rights, safety, and security of our users and the service.

Where your data is processed

spaturzu runs on Amazon Web Services. Depending on the region your data is processed in, it may be transferred to and stored in a country other than your own. Because this is a beta, our processing regions may change; if you have specific data-residency requirements, contact us before relying on the service.

How long we keep it

We keep detailed usage records for a limited time — currently about 7 days by default, longer on paid plans — and then delete them. We keep aggregated cost summaries longer so your historical charts survive. If you delete your account, we remove your data within a reasonable period, except where we must retain something to meet a legal obligation. Because this is a beta, these periods will change.

How we protect it

Traffic to spaturzu is encrypted in transit (HTTPS). Each project authenticates to the gateway with its own key, which you can rotate. No service can promise perfect security, but because we never hold your prompt or response content, the most sensitive part of your LLM traffic is never at risk on our side.

Your choices and rights

You can view your data in the dashboard, sign out at any time, and rotate your project keys. To access, export, correct, or delete your account data — or to ask any question about how it's handled — reach us through the contact form below and we'll help. Depending on where you live, you may have additional rights over your personal data under local law; we'll honour valid requests to the extent the law requires.

Children

spaturzu is a developer tool, not directed to children, and is not intended for anyone under 16. We don't knowingly collect data from children; if you believe a child has provided us data, contact us and we'll remove it.

Changes to this policy

We'll post any changes here and update the "last updated" date. Continuing to use spaturzu after a change means you accept the updated policy.

Contact us

Questions about your privacy or this policy? Use the contact form on this page and we'll get back to you. See also our Terms & Conditions.