Privacy Policy

This Privacy Policy explains how Card Spend ("we", "us") collects, uses, and protects your information when you use our website and applications (the "Service"). By using the Service, you agree to this policy.

Information we collect

• Account information. Your name, email address, and a securely hashed password when you create an account.
• Financial data you provide. Credit card metadata, transactions, statements, and categories that you import or enter. This data is used solely to provide the Service to you. We do not collect full card numbers or bank login credentials.
• Payment information. Payments are processed by Stripe. We never receive or store your full card details — we store only a Stripe customer identifier and your plan status.
• Usage data. Basic technical information such as log and device data needed to operate and secure the Service.

How we use your information

• To provide, maintain, and improve the Service.
• To process payments and manage your subscription or license.
• To send transactional messages such as password resets.
• To protect against fraud, abuse, and security threats.

How we share your information

We do not sell your personal information. We share data only with:

• Service providers that help us operate the Service — including Stripe (payments), our database and hosting providers, and Resend (transactional email) — under agreements that limit their use of your data to providing services to us.
• Legal requirements — when required to comply with law or to protect rights, safety, and property.

The desktop app

The Card Spend desktop application stores your financial data locally on your own device. That data is not transmitted to us and remains under your control.

Data retention and deletion

We retain your data for as long as your account is active. You can delete your account at any time from Settings, which removes your associated data from our systems. You may also contact us to request deletion.

Security

We use industry-standard measures to protect your data, including encryption in transit and hashed passwords. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Contact us to exercise these rights.

Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. We will post the updated version here with a revised date.

Contact

Questions about this policy? Email us at support@cardspend.org.