Privacy Policy

Last updated: February 2026

1. Introduction

ViewLayer (“we,” “us,” or “our”) operates the website at viewlayer.ai and the ViewLayer AI spend management platform (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, company name, and job title. If you sign up via a third-party provider (Google, Microsoft, or Apple), we receive your name and email from that provider.

2.2 Usage Data

The core of our Service involves collecting and analyzing AI platform usage data on your behalf. This includes token counts, model identifiers, timestamps, cost calculations, and platform identifiers (e.g., OpenAI, Anthropic, Google AI). We do not collect, store, or process the content of your AI prompts or outputs.

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers or full payment details on our servers. Stripe may collect and store payment information in accordance with their own privacy policy. We retain only a record of your subscription plan, billing cycle, and transaction history.

2.4 Technical Data

We automatically collect certain technical information when you use the Service, including your IP address, browser type and version, operating system, referring URL, pages visited, and the dates and times of your visits. We also use essential cookies as described in Section 7.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide the Service: Deliver AI spend tracking, budget management, reporting, and dashboard features.
  • Billing: Process payments, manage subscriptions, and maintain billing records.
  • Analytics: Generate aggregate usage insights to help you understand your team's AI spending patterns.
  • Support: Respond to your inquiries, troubleshoot issues, and provide customer support.
  • Product improvement: Analyze usage patterns in aggregate to improve our Service, develop new features, and enhance performance.
  • Communication: Send you service-related notifications, updates, security alerts, and administrative messages.

4. Third-Party Services

We share information with the following categories of third-party service providers:

  • Stripe — Payment processing. Stripe receives payment information necessary to process your subscription. See Stripe's Privacy Policy.
  • AI Platforms — When you connect your AI platform accounts (OpenAI, Anthropic, Google AI, Mistral, Cursor, GitHub Copilot, Perplexity, v0), we access usage metadata through their APIs using credentials you provide. We only retrieve usage and billing data, never prompt or output content.
  • Vercel — Hosting and infrastructure. Our Service is hosted on Vercel's platform. See Vercel's Privacy Policy.

We do not sell your personal information to third parties. We do not share your information with third parties for their own marketing purposes.

5. Data Retention

We retain your AI usage data for a period determined by your subscription plan:

  • Standard plan: 30 days of usage data retention.
  • Pro plan: 90 days of usage data retention.
  • Business and Enterprise plans: Custom retention periods as configured by your administrator.

Account information (name, email, company) is retained for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.

6. Your Rights

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that we correct any inaccurate or incomplete personal information.
  • Deletion: Request that we delete your personal information, subject to certain legal exceptions.
  • Export: Request a machine-readable export of your data, including all usage data and account information.

To exercise any of these rights, contact us at gatelayerplus@gmail.com. We will respond to your request within 30 days.

7. Cookies

We use only essential cookies that are strictly necessary for the operation of our Service. These include:

  • Authentication cookies: To keep you signed in and maintain your session.
  • Preference cookies: To remember your dashboard settings, theme preferences, and display options.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. We do not participate in cross-site tracking.

8. Security

We implement industry-standard security measures to protect your information:

  • Encryption in transit: All data is transmitted using TLS 1.3 encryption.
  • Encryption at rest: All stored data is encrypted using AES-256 encryption.
  • SOC 2 compliance: We are pursuing SOC 2 Type II certification and follow SOC 2 security controls.
  • Access controls: Role-based access controls with multi-factor authentication for administrative access.

For security concerns, contact our security team at security@viewlayer.ai.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at the address associated with your account and update the “Last updated” date at the top of this page. Your continued use of the Service after such notification constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us: