Privacy Policy
Last updated: 2026-07-19
This is a general privacy policy describing how Spendora currently handles data. It is written in plain language and has not yet been reviewed by a lawyer — treat it as a good-faith description of our practices, not a substitute for professional legal advice.
What we collect
Account information (name, email, profile image) via our authentication provider, Clerk. Financial data you enter yourself — transactions, invoices, clients, accounts, and budgets. If you use receipt scanning, the receipt image is sent to OpenAI for processing and is not permanently stored by us. If you use the free guest invoicing tool without an account, your invoices are stored only in your browser's local storage until you sign up.
How we use it
Solely to operate the product you asked for: rendering your dashboard, generating your invoices, sending emails you request (e.g. an invoice to your client), and calculating currency conversions. We do not sell your data, and we do not use your financial data to train AI models.
Who we share it with
We use a small number of infrastructure providers to run Spendora, each processing only what's needed to provide their service: Clerk (authentication), Neon (PostgreSQL database hosting), Resend (transactional email), OpenAI (receipt-image text extraction), Arcjet (bot and abuse protection), and Vercel (application hosting). None of these providers are permitted to use your data for their own purposes.
Data retention & deletion
Your data is retained for as long as your account is active. To request deletion of your account and associated data, contact us at hello@spendora.finance.
Security
See our Security page for details on how we protect your data in transit and at rest.
Changes to this policy
If this policy changes materially, we'll update the date above. Continued use of Spendora after a change constitutes acceptance of the update.
Contact
Questions about this policy? Email hello@spendora.finance.