Privacy Policy

Last updated: June 8, 2026

Fivemetrics (“Fivemetrics”, “we”, “us”) provides a multi-tenant AWS observability platform that gives organizations a single view of their cloud cost, security findings, and resource operations. This Privacy Policy explains what data we process, why, and the choices you have. It applies to fivemetrics.io and the Fivemetrics application.

1. Information we collect

We process the following categories of data:

  • Account data — your name, email address, and authentication identifiers. When you sign in with Google, GitHub, or Apple, we receive your name, email address, and profile identifier from that provider. We never receive your provider password.
  • Organization & team data — organization names, team membership, roles, and invitations.
  • AWS account metadata — the AWS account identifiers you connect, and the configuration required to read your billing and operational data through a cross-account role you create. We never store long-lived AWS credentials; access is granted at request time through a role you control and can revoke at any time.
  • Cloud billing & operational data — cost and usage information, security findings, resource inventory, and alarms read from your AWS account in order to render your dashboards. This data is scoped to your organization and isolated from other tenants.
  • Product analytics & diagnostics — pages viewed, feature usage, and error reports, used to operate and improve the service. Analytics are keyed to an internal identifier; we do not sell this data.

2. How we use your data

  • To provide, secure, and operate the Fivemetrics platform.
  • To render your cost, security, and resource dashboards from the AWS data you authorize us to read.
  • To authenticate you and manage your organization, team, and roles.
  • To send transactional messages (verification codes, invitations, alerts, password resets).
  • To diagnose errors, monitor reliability, and improve the product.

We do not sell your personal data, and we do not use your cloud billing or operational data for advertising.

3. Legal bases

Where the GDPR applies, we process your data on the basis of performance of our contract with you (to deliver the service), our legitimate interests (to secure and improve the platform), and your consent where required (for certain analytics).

4. Sub-processors

We rely on the following service providers to operate Fivemetrics. Each processes data only as needed to provide their service:

  • Supabase — database, authentication, and storage.
  • Vercel — application hosting.
  • Amazon Web Services — the source of the cloud data you connect, accessed via a role you control.
  • Resend — transactional email delivery.
  • PostHog — product analytics.
  • Sentry — error and performance monitoring.
  • Axiom — server log storage.

5. Data retention

We retain your account and organization data for as long as your account is active. When you delete an organization, its tenant data is removed after a short grace period. You can request deletion of your account and associated data at any time by contacting us.

6. Data security

Data is encrypted in transit. Tenant data is isolated per organization through row-level security, and access to your AWS account uses a short-lived, externally-identified role rather than stored credentials. Despite our safeguards, no method of transmission or storage is completely secure.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. You can also disconnect any AWS account and revoke its role from within your AWS account at any time.

8. Cookies

We use strictly necessary cookies to keep you signed in, and analytics cookies to understand product usage. You can control cookies through your browser settings.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice.

10. Contact

For privacy questions or requests, contact us at support@fivemetrics.io.