Privacy Policy

Anavsan, Inc. ("Anavsan", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Anavsan platform and website (collectively, the "Service").

1. Overview

Anavsan is a Snowflake workload governance platform. We access Snowflake metadata only — we never read, copy, or transmit your actual business data stored in Snowflake tables. This is a fundamental design principle of our platform.

By using our Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account information: When you register for Anavsan, we collect your name, email address, company name, job title, and password (stored in hashed form).

Usage data: We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, and device information (browser type, operating system, IP address).

Snowflake metadata: To provide our Service, we access Snowflake metadata through a read-only service user you configure. This includes:

• Query history (SQL query text, execution time, warehouse, user, credits consumed)
• Warehouse usage and configuration metadata
• Storage metadata (table sizes, Time Travel settings, clone metadata)
• Account usage and cost signals from SNOWFLAKE.ACCOUNT_USAGE
• AI Services and Cortex usage metadata

We do not access: the actual data in your Snowflake tables, user passwords, Snowflake account credentials (beyond the service user token you provide), or any data outside of Snowflake metadata schemas.

Communications: If you contact us, we retain records of that correspondence including email content.

Payment information: Payment details are processed by our payment provider (Stripe). Anavsan does not store your full credit card numbers.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and improve the Anavsan platform
• Detect Snowflake cost anomalies and surface optimization recommendations
• Generate cost attribution, accountability assignments, and savings documentation
• Send you product updates, security alerts, and administrative messages
• Respond to customer support inquiries
• Analyze usage patterns to improve our products and features
• Comply with legal obligations
• Detect and prevent fraud, abuse, and security incidents

We do not sell your personal information or Snowflake metadata to third parties. We do not use your data for advertising targeting.

4. Sharing of Information

We may share your information in the following limited circumstances:

• Service providers: Third-party vendors who assist us in operating the Service (e.g., cloud hosting, email delivery, analytics, payment processing). These vendors are contractually bound to protect your data.
• Legal requirements: If required to do so by law, court order, or government authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, provided the acquiring entity agrees to honor this Privacy Policy.
• With your consent: For any other purpose with your explicit consent.

We do not share, sell, rent, or trade your Snowflake metadata with third parties for their commercial purposes.

5. Snowflake Data Access

Anavsan connects to your Snowflake account using credentials you provide. Our access is strictly limited to:

• Read-only access to Snowflake's system metadata schemas (SNOWFLAKE.ACCOUNT_USAGE, INFORMATION_SCHEMA)
• No write access to any Snowflake objects or data
• No access to your business data tables, views, or procedures

For the Native App deployment (Snowflake Marketplace), all processing occurs entirely within your Snowflake account. No data leaves your Snowflake environment in this deployment mode.

Snowflake metadata processed by Anavsan is stored in our secure infrastructure for the purpose of providing the Service and is subject to our data retention policies.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on our website and platform to:

• Maintain your login session
• Remember your preferences (e.g., dark/light theme)
• Analyze website traffic and usage patterns
• Measure the effectiveness of our marketing

We use Google Analytics (GA4) and Google Tag Manager to understand how visitors use our website. These tools collect anonymized usage data. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of the Service.

7. Security

We implement industry-standard technical and organizational security measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Industry-standard security controls
• Regular security audits and penetration testing
• Least-privilege access controls for internal systems
• Secure credential handling and storage

Despite our efforts, no security system is impenetrable. We cannot guarantee absolute security of your information. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.

8. Data Retention

We retain your personal information and Snowflake metadata for as long as your account is active or as needed to provide the Service.

• Account data: Retained for the duration of your account plus 30 days after account closure
• Snowflake metadata: Retained for up to 13 months to enable trend analysis and historical comparisons
• Usage logs: Retained for 90 days for security and debugging purposes

You may request deletion of your data at any time by contacting us at contactus@anavsan.com. We will delete your data within 30 days, except where we are required to retain it by law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request your data in a machine-readable format
• Restriction: Request that we restrict processing of your data in certain circumstances
• Objection: Object to processing of your data for certain purposes
• Withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at contactus@anavsan.com. We will respond within 30 days. We may need to verify your identity before fulfilling requests.

10. International Data Transfers

Anavsan, Inc. operates from Anavsan HQ in Boston, MA, USA. If you access our Service from outside the United States, your information may be transferred to and processed in the United States.

For users in the European Economic Area (EEA) or United Kingdom, we transfer data pursuant to standard contractual clauses approved by the European Commission or other appropriate transfer mechanisms.

11. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by sending an email to the address associated with your account or by posting a notice on our website at least 14 days before the changes take effect.

Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.

13. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our privacy team: