Privacy Policy

Last updated: August 1, 2025

1. Information We Collect

Transaction Data Only

When you use SpendTracker, our AI processes your emails to extract only the following transaction-related information:

• Transaction amounts
• Merchant names and categories
• Transaction dates and times
• Payment methods (last 4 digits only)
• Transaction types (purchase, refund, transfer, etc.)

Account Information

We collect minimal account information necessary for service operation:

• Email address (for account identification only)
• Account preferences and settings
• Service usage analytics (anonymized)

2. How We Process Your Data

AI-Powered Email Processing

Our service works through a secure, privacy-first process:

1. Temporary Access: Emails are accessed only for the duration of processing
2. AI Analysis: Large Language Models (LLMs) analyze email content to identify transaction patterns
3. Data Extraction: Only relevant financial transaction details are extracted
4. Immediate Deletion: Raw email content is immediately and permanently deleted
5. Secure Storage: Only the extracted transaction data is stored in our encrypted database

3. Data Security

Encryption and Protection

• All data transmission uses industry-standard TLS encryption
• Transaction data is encrypted at rest using AES-256 encryption
• Access to systems is restricted and monitored
• Regular security audits and penetration testing

AI Processing Security

• Email processing occurs in secure, isolated environments
• AI models are fine-tuned to minimize data exposure
• No email content is used for model training
• Processing logs are automatically purged

4. Data Usage and Sharing

How We Use Your Transaction Data

• Provide transaction tracking and categorization services
• Generate spending insights and analytics
• Improve service accuracy and performance
• Detect and prevent fraudulent transactions

Data Sharing

We do NOT sell, trade, or share your personal transaction data with third parties. Limited sharing may occur only in these circumstances:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and prevent fraud
• With service providers under strict confidentiality agreements

5. Your Rights and Controls

Data Access and Control

You have the right to:

• Access all transaction data we've stored
• Request correction of inaccurate data
• Delete your account and all associated data
• Export your transaction data
• Opt-out of data processing at any time

Account Deletion

You can request complete account deletion at any time. Upon deletion:

• All transaction data is permanently removed
• Email access permissions are revoked
• Account information is purged within 30 days
• Anonymized usage statistics may be retained for service improvement

6. Cookies and Tracking

We use minimal cookies and tracking technologies:

• Essential cookies for service functionality
• Analytics cookies to understand service usage (anonymized)
• No advertising or cross-site tracking cookies

7. International Data Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through:

• Standard contractual clauses
• Adequacy decisions where applicable
• Additional safeguards for sensitive data

8. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children. If we discover such collection, we will delete the information immediately.

9. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via:

• Email notification to registered users
• Prominent notice on our website
• In-app notifications