Privacy Policy

Last updated: April 23, 2026

This policy explains what Spendwall collects, why it is collected, and how data is handled across authentication, billing, provider connections, and product support.

1. Account and identity data

When you create an account, Spendwall may store identifiers such as name, email address, authentication provider, workspace membership, and basic account metadata needed to operate the service.

2. Provider connection data

When you connect a provider, Spendwall stores the connection metadata required to authenticate and fetch the signals that provider officially exposes. Credentials are handled server-side and are intended for read-only visibility where the provider supports that access pattern.

3. Usage, billing, and subscription data

Spendwall stores subscription state, invoice references, plan entitlements, and product usage needed to deliver the service. Payments are processed by Stripe, and Spendwall does not store raw payment card details on its own systems.

4. Product analytics and support

We may retain product events, audit-style records, support requests, and diagnostic logs so we can keep the service reliable, investigate issues, prevent abuse, and respond to customer questions.

5. How information is used

Information is used to authenticate users, operate workspaces, fetch provider data, evaluate thresholds, send alerts, manage subscriptions, improve product quality, and communicate operational or support updates.

6. Sharing and subprocessors

Spendwall does not sell personal information. Data may be shared with infrastructure, authentication, billing, email delivery, or support vendors strictly to run the product and only to the extent needed for those functions.

7. Retention and deletion

We retain account, workspace, and product records only as long as needed to provide the service, enforce plan history rules, resolve disputes, or comply with legal obligations. Connected provider data and account information may be deleted or anonymized according to operational and legal requirements.

8. Security posture

Spendwall uses server-side handling for sensitive credentials, access controls for protected routes, and provider-aware validation flows. No system is risk free, but the product is designed to minimize unnecessary access and write capability.

9. Your choices

You can disconnect providers, update account details, manage billing state, or request support regarding your information. Some data may remain where required for accounting, security, fraud prevention, or legitimate operational needs.

10. Contact

If you have questions about this Privacy Policy, contact privacy@spendwall.com.