Privacy Policy

1. Information we collect

When Claude Code in your organization is configured to send telemetry to Aimeterly, we receive usage telemetry. This includes user identifiers contained in the telemetry — such as the user's email address and user ID — along with the model used, session identifiers, the team or department attributes you set (including custom attributes provided via OTEL_RESOURCE_ATTRIBUTES), and usage and cost metrics such as token counts. The email address is personal information; we use it to identify users on your organization's dashboards.

2. Content capture

By default, Claude Code does not send the body of prompts, responses, or tool input and output; these are redacted. If, and only if, your organization enables content capture, we record the corresponding content as your organization's data. There are four categories, and each is off by default until your organization opts in:

• Prompt text — the body of prompts developers send.
• Response text — the text of Claude Code's responses.
• Tool details — information such as file paths and executed commands.
• Tool input and output content — file edit contents and similar.

Each captured content item is truncated at approximately 60KB. Enabling any of these categories, notifying employees, and obtaining any consent required in your jurisdiction are the responsibility of your organization.

3. How we use information

We use the usage telemetry described in Sections 1 and 2 solely to provide the service — to display usage, cost, and audit information on the dashboards of the organization the data belongs to. We do not use personal information contained in telemetry for any purpose other than providing the service. We do not sell it, and we do not use it to train machine-learning models.

4. Data retention and deletion

We retain data according to your organization's plan: 7 days on the Free plan, 90 days on the Pro plan, and 365 days on the Enterprise plan (a longer period may apply under an individual contract). Data older than your plan's retention period is deleted. When an administrator requests deletion of an organization, we delete that organization's telemetry data and account information within 30 days.

5. Subprocessors

We rely on a small number of subprocessors to operate the service: Stripe for payment processing (Stripe stores card information; we do not), and Cloudflare for hosting, infrastructure, and transactional email delivery.

6. Your organization's responsibilities

Your organization decides what data it sends. Deciding whether to enable content capture, notifying the individuals affected, and obtaining any required consent are your organization's responsibility.

7. Public website analytics

On our public pages (such as the landing and pricing pages), we record button and link clicks and FAQ opens to improve the site. We record only the event name, an auxiliary label (such as a question identifier or plan name), the display language, the page path, and the event timestamp. This analytics uses no tracking cookies, and no information that identifies you — such as your name or email address — is collected. These records are processed on Cloudflare and are deleted automatically after roughly three months. In addition, our public pages use Google tags, as described in Section 8.

8. Third-party transmissions from our public site (Google tags)

Our public marketing pages (such as the landing and pricing pages — never the signed-in dashboard) use Google Tag Manager and Google Analytics, provided by Google LLC, to analyze and improve how the site is used. When you view these pages, your browser automatically transmits the following information to Google:

• Identifiers stored on your device, such as cookies
• The URL of the page you view, the referrer, and the date and time of the visit
• Device information such as your browser, operating system, and screen size
• Your IP address (used to estimate an approximate region)

We use this information solely to understand how our public site is used — such as page views and visit counts — and to improve the site and our service. We receive statistical reports from Google and do not use this information to identify specific individuals.

Information transmitted to Google is handled under Google's privacy policy, and Google may use it for purposes such as providing, maintaining, and improving its own services. See the pages below for details and opt-out options. You can also stop these transmissions by disabling cookies in your browser settings.

• Google Privacy Policy
• How Google uses information from sites or apps that use its services
• Google Analytics Opt-out Browser Add-on

9. Contact

For privacy questions or requests, contact us at info@starcross.co.jp.