Deletion
Purge an account or erase everything.
An administrator can purge a single AWS account or erase the whole business. Both run as tracked jobs and leave an audit record that the deletion happened.
03Trust
Your data, your account,your call.
How SpendShrink connects to AWS, what it keeps and for how long, and how to remove all of it. Every permission the role uses is published below.
- Access
- Read-only IAM role
- Billing data
- In a bucket you own
- Amazon SES
- Payments
- Stripe
01The data path
Where your billing datagoes, step by step.
The role has 53 permissions, and every one is a Get, List or Describe call. It cannot start, stop, resize or delete anything.
01
AWS writes
AWS Data Exports delivers the FOCUS cost export into an S3 bucket in your account. The bucket stays yours.
02
SpendShrink reads
The collection role reads the export files and resource metadata, using the ExternalId issued to your workspace.
03
SpendShrink stores
Normalized cost and usage records, resource details, and findings with their evidence, in our database.
04
You remove access
Delete the CloudFormation stack and the role is gone. Collection stops with it.
02What we keep
What we store,and why.
Only what a finding needs to be explained and acted on.
- Cost and usageDaily cost records per account, service and resource, derived from your FOCUS export.
- Resource metadataIdentifiers, tags, sizes and utilization metrics needed to explain a finding.
- Your team's workOpportunity status, owners, approvals, comments and the savings validation ledger.
- ConversationsQuestions asked of the assistant and its answers, deleted after 90 days.
- Audit eventsWho changed what and when, kept for 400 days.
03Retention
How long each kindof data is kept.
A scheduled sweep deletes rows once their period runs out.
This schedule is still under review. Where no period is listed, there is no automatic deletion yet.
| Data | Kept for | How it is removed |
|---|---|---|
| AI prompts and conversation containers | 90 days | Rows older than 90 days are deleted by the retention sweep |
| AI prompts and messages | 90 days | Rows older than 90 days are deleted by the retention sweep |
| AI tool-call records | 90 days | Rows older than 90 days are deleted by the retention sweep |
| Business audit events | 400 days | Rows older than 400 days are deleted by the retention sweep |
| Governance audit events | 400 days | Rows older than 400 days are deleted by the retention sweep |
| AWS access audit events | 400 days | Rows older than 400 days are deleted by the retention sweep |
| Raw FOCUS manifests retained per published source policy | Source policy | Retained per the published source policy; no automatic sweep |
| Product funnel events when present | 400 days | Rows older than 400 days are deleted by the retention sweep |
| Alert history | 365 days | Rows older than 365 days are deleted by the retention sweep |
| Alert notification delivery history | 365 days | Rows older than 365 days are deleted by the retention sweep |
04Control
Deletion, emailand payments.
Questions about access or deletion go to support@spendshrink.com. Legal terms are in the privacy policy.
Only transactional mail.
Email goes out through Amazon SES from a fixed set of templates: alerts, reports and account notices.
Payments
Cards stay with Stripe.
Payments run through Stripe. Card details go to Stripe directly and never reach our servers.