Privacy notice
DRAFT — for attorney review. Not legal advice. Not the final notice.
Blue Heron Digital Services LLC ("Blue Heron", "we") prepared this draft for the Cloud Savings Scanner at our direction in Lakeland, Florida. A prospect can upload a cost file or connect Azure or AWS read-only.
Who we are
Blue Heron Digital Services, LLC, Lakeland, FL. Contact: support@blueheronds.com, (863) 279-0817, blueheronds.com.
What we collect
- The email address you enter, and your name, company, and approximate monthly spend if you choose to add them.
- The cost file you upload, which can contain resource names, regions, tags, and dollar amounts from Azure or AWS.
- The time you agreed to this notice, and a reference code we show you.
- Technical logs such as a rough network address, used to limit repeated uploads.
We do not ask for a cloud password or an access key. If you choose Connect Azure, we store your tenant id and subscription ids, encrypted. If you choose Connect AWS, we store the role ARN and a per-connection external id, encrypted. You can revoke that at /revoke. Revoking deletes what we stored. You still delete the Entra application or the CloudFormation stack in your own cloud so the access itself is gone.
Why we use it
We use the file to draft a savings review for you, and to reply about that review. Scott Wood reads the draft before any note is sent to you. The app does not email you by itself.
If we turn on an optional AI summary, the draft findings (not the raw file) are sent to the model host Scott configures. That switch is off unless he sets it. A webhook or email notification to Scott can include your email, the detected file type, the savings ranges, and a follow-up draft. It does not include the raw file.
How long we keep it
The raw upload is encrypted and deleted after 30 days, unless a different retention period is configured. The draft report, which holds totals and the lines the review cites, stays until you or we delete the submission.
Deleting your file
Use the reference code and the same email at /delete. We delete the raw file and the draft when they match. You can also email support@blueheronds.com.
Who we share it with
We do not sell the file. Hosting is in our own environment (planned on Microsoft Azure in the United States). Staff access is a single login. An optional assistant token can read the queue and the draft. It cannot send mail to you.
Security
Uploads are encrypted before they are written to disk. The hosting disk is private. These are safeguards, not a promise that a breach is impossible.
Google Analytics and Google Ads
If these tags are turned on, the public pages load Google Analytics and Google Ads. Those tags use cookies to measure visits and ad performance, and to record when a scan is submitted. A submitted scan is one event. We do not send cost data, resource details, or credentials to Google. We do not send your email address to Google.
You can opt out in your browser's cookie settings, in Google's ad settings, and with the Google Analytics opt-out add-on.
The business is Blue Heron Digital Services LLC, Lakeland, FL. Contact support@blueheronds.com.
Your choices
You can skip name, company, and spend. Email and the file are how we reply. You can refuse the notice and not upload.
Changes
Replace this draft after an attorney reviews it, before a real customer file is accepted.