Privacy policy
This policy explains what Gosset ("we", "us") collects, why, how long we keep it and what you can ask us to do with it. Questions go to support@usegosset.com.
The free Bill X-ray
When you use the Bill X-ray, your usage file is read by code running in your own browser. The file and the results are never sent to us or to anyone else. We cannot see them. Usage exports contain token counts, model names, dates and API key names or IDs; they do not contain prompts, your users' messages or API keys.
Visiting this website
The website sets no cookies and loads no analytics, advertising or tracking scripts. All fonts and code are served from our own site. Our hosting provider may keep standard server logs, such as IP address, page requested, time and browser type, for security and reliability, for up to 30 days.
Paid services: break test and weekly plans
When you buy a break test or a weekly plan, we collect:
- Contact details: your email address, so we can deliver your report and contact you about your order.
- Test requests: the sample of your app's requests that you choose to send us. Our mapping prompt asks your coding agent to replace emails, phone numbers, card numbers, street addresses, API keys and full names with placeholders before anything leaves your machine. Please check the sample before you send it.
- Test results: the answers that models give to your requests during the test, and the scores we calculate.
- Usage summaries that you choose to share, such as a usage export.
We use this data only to run your tests, produce your reports and support you. We do not use it to train models, and we do not sell it.
Who processes data for us
- AI model providers (such as OpenAI, Anthropic, Google and providers reached through OpenRouter): your masked test requests are sent to the models being tested, under each provider's API terms.
- Dodo Payments is our merchant of record. It processes your payment and billing details under its own privacy policy. We never see your full card number.
- Hosting and email providers that store our service data and send our emails.
How long we keep it
- Break test requests and results: deleted 14 days after your report is delivered, unless you join a weekly plan.
- Weekly plan test sets: kept while your plan is active, and deleted within 14 days after you cancel.
- Order and billing records: kept as long as tax and accounting law requires.
Your choices and rights
You can ask us to show, correct, export or delete the personal data we hold about you by emailing support@usegosset.com. We reply within 30 days. You can unsubscribe from any non-essential email with the link in it. Depending on where you live, you may also have the right to complain to your local data protection authority.
Security
Data is encrypted in transit. Access to service data is limited to the people who run your tests. No system is perfectly secure, so we collect as little as we can and delete it on the schedule above.
Children
Our services are for businesses and adults. We do not knowingly collect data from anyone under 18.
Changes
If we change this policy, we will update the date at the top. If a change materially affects how we use data you have already given us, we will email you first.