Privacy Policy.
Last updated May 29, 2026 · Blue Maven Dynamics LLC (operating whatmodel)
whatmodel exists to make your AI spend legible and to tell you exactly what to change. To do that we need to see the shape of your usage — not its contents. This page is the plain version of how that works. It describes commitments we have built into the product, not intentions we hope to honour.
What we collect
We collect usage metadata only — the numbers that describe how you spend, never the work your agents do. Depending on which sources you connect, that means:
- Model identifiers (which model a call used) and the provider it ran against.
- Token counts — input and output — and the resulting dollar cost per call.
- Timestamps, request counts, and aggregate volume over time.
- Project or workspace labels you attach so spend can be attributed.
- Account basics: your email and workspace name, from Google sign-in.
The keyless scan reads agent logs that already exist on your own disk and sends us only the counts above. The ingestion schema is strict: it has no field for prompt or response text, so message content is rejected before it ever leaves your machine.
What we never collect
We never collect your prompts or your responses. Not the text you send a model, not the text it sends back, not the documents you pass through it. The scan schema rejects content fields by design — there is no path in the product that would store them. When you connect a provider key, your traffic stays on your own account, billed to your own card, under your own identity. We never proxy the bytes of a request unless you explicitly turn on Optimize and ask us to.
How we use it
We use your usage metadata to do the four things whatmodel is for: scan your spend, analyse where money goes, show you a dashboard, and advise you on which models to switch and where regressions appear. The recommendations we surface — the model we would switch you to, the slice we would compress, the calls we would cache — are computed for you and stay inside your workspace. That optimization recipe is yours; we do not publish it, and public pages on this site show category labels and totals, never the play.
We may use de-identified, aggregate figures — never tied to you and never including any content — to improve our model index and the quality of the advice the product gives everyone. We do not use your data to train models.
Storage and security
Connected credentials and the usage metadata we derive are encrypted at rest using an AES-GCM envelope scheme, with the encryption key held server-side and never exposed to the browser. Everything moves over HTTPS in transit. Provider credentials use the smallest scoped, read-only access that does the job — enough to read usage totals, never enough to send traffic or change your account. Access to production data is limited to what is required to operate the service.
Third parties
We rely on a small set of infrastructure providers to run the service. By category, they cover hosting, database, authentication, and product analytics. These providers process data on our behalf under their own security commitments and only to the extent needed to deliver whatmodel. We never sell your data, and we do not share it with anyone for advertising or for their own purposes.
Data retention and deletion
We keep your usage metadata for as long as your workspace is active, so trends and before-and-after comparisons stay meaningful. You can disconnect a source at any time, which stops new collection from it. When you delete your workspace, we delete the usage metadata and connected credentials associated with it. You can also ask us to delete your data directly at the address below.
Your rights
You can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. You control which sources are connected and can revoke any provider credential from your own provider console at any time — independent of us. We will respond to requests within a reasonable time.
Changes to this policy
If we change this policy, we will update the date at the top and, for material changes, tell you in the product. Continuing to use whatmodel after a change means the updated policy applies.
Contact
Questions, requests, or anything privacy-related: privacy@whatmodel.dev. The operator of whatmodel is Blue Maven Dynamics LLC.