Privacy Policy

Data Storage and Processing

What We DO NOT Store:

• Azure subscription IDs or names
• Cost data, billing information, or usage metrics
• Resource names, resource groups, or resource metadata
• Budget configurations or spending limits
• Pricing information or rate data
• User email addresses or contact information
• Access tokens beyond the active session

What We DO Store (Minimally):

• Session Data Only: Temporary authentication tokens stored in memory during your active session
• Application Logs: Technical logs for debugging purposes (no sensitive data included)
• Anonymous Telemetry: Non-identifiable error tracking to improve application stability

How Your Data Flows

Authentication & Security

This application uses Microsoft Azure Active Directory (Azure AD) for authentication using industry-standard OAuth 2.0 and OpenID Connect protocols. Your Azure credentials are never transmitted to or stored by PWA Consulting LLC.

• Secure Token Handling: Access tokens are stored in encrypted session cookies and memory only
• Session Expiration: Tokens automatically expire and are removed when you log out or after inactivity
• Direct Azure API Calls: All data requests go directly from our application to Azure APIs
• HTTPS Only: All communications are encrypted using TLS/SSL

Data Exports

When you export reports (CSV, PDF, JSON, Markdown), these files are generated on-the-fly and delivered directly to your browser as downloads. We do not retain copies of exported reports on our servers.

Cookies and Tracking

• Essential Cookies Only: We use cookies solely for authentication and session management
• No Analytics Cookies: We do not use Google Analytics or similar tracking services
• No Third-Party Advertising: This application contains no advertisements or tracking pixels

Your Rights

Since we do not store your Azure data, there is no personal data to request, modify, or delete from our systems. However, you maintain full control over:

• Your Azure subscription and resources (managed through Azure Portal)
• Your session by logging out at any time
• Revoking application access through Azure AD enterprise applications

Compliance

PWA Consulting LLC operates as a data processor, not a data controller. All Azure cost and billing data remains under the control of Microsoft Azure and your organization. This application is designed to comply with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Microsoft Azure Terms of Service
• OAuth 2.0 and OpenID Connect security standards

Infrastructure & Hosting

This application may be hosted on secure cloud infrastructure. While we do not store your Azure data, standard web server logs may temporarily contain IP addresses and request metadata for security and operational purposes. These logs are:

• Automatically rotated and purged after 30 days
• Not shared with third parties
• Used solely for security monitoring and technical troubleshooting

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact: