Last updated June 15, 2026
This Privacy Policy describes how SmashCost ("we," "us," or "our") collects, uses, and shares information about you when you use our services at smashcost.com. SmashCost is operated by Camilo Caner, a sole proprietor based in Paraguay.
Questions? Contact us at support@smashcost.com
Information you provide directly: name, email address, username, and password when you register; organization name; billing email address.
API keys you configure: keys for third-party AI providers (OpenAI, Anthropic, Groq, Google, etc.) that you choose to add to your account. These are encrypted at rest immediately upon receipt and never stored in plaintext.
Usage metadata collected automatically: per-request metadata (model name, token counts, latency, cost, routing decision) for each AI request routed through SmashCost. We do not collect the content of your prompts or AI responses — see Section 3.
Technical data: IP address, browser type, and interaction data with our dashboard for security and service improvement purposes.
SmashCost operates on a strict no-prompt-storage policy:
SmashCost uses a bring-your-own-key (BYOK) model. Your API requests — including prompt content — are forwarded directly to your configured third-party AI providers using your own API keys. Those providers process your prompts under their own privacy policies (see OpenAI, Anthropic, Groq, Google).
SmashCost only records metadata per request (model, tokens, cost, latency) to power your savings dashboard. This metadata contains no prompt content.
We use your information to:
All payments are processed by Paddle.com, who acts as Merchant of Record. SmashCost does not receive, store, or process your credit card or payment information. For details, see Paddle's Privacy Policy. Paddle may share basic transaction metadata (subscription status, amount) with us to manage your account.
We share your data only with the following service providers, strictly for operating the Service:
We do not share, sell, or disclose your data to any other third party except when required by law or to protect the rights and safety of SmashCost, our users, or others.
We retain your account information and usage metadata as long as your account is active. Upon account deletion request, we delete your personal information (name, email, API keys) from our active systems within a reasonable timeframe. Aggregated or anonymized analytics data that cannot identify you may be retained for service improvement purposes. Backup copies may persist for a limited period consistent with our disaster recovery policies.
We implement appropriate technical and organizational measures to protect your information, including:
No security system is 100% secure. We cannot guarantee absolute security of data transmitted over the internet. For a full description of our security measures, see our Security page.
Depending on your jurisdiction, you may have rights to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to certain processing; or receive a portable copy of your data. To exercise any of these rights, contact us at support@smashcost.com. We will respond within a reasonable timeframe consistent with applicable law.
SmashCost uses a single session cookie to authenticate your dashboard session. We do not use third-party tracking cookies, advertising cookies, or analytics SDKs that track you across sites.
SmashCost is operated from Paraguay. By using the Service, you consent to the transfer of your information to Paraguay and to servers hosted by Railway (which may be located in various countries). We take appropriate steps to ensure your data is treated securely wherever it is processed.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or dashboard notice. Continued use of the Service after the effective date of any update constitutes acceptance of the revised policy.
SmashCost — Camilo Caner
Mariano Roque Alonso, Central, Paraguay
support@smashcost.com