Privacy
The essentials about your data, your choices, and the services that help ExpenseLense work.
Last updated: September 29, 2026
At a glance
- You choose which statements and receipts to add. No bank login is required.
- Specialist providers process data to run the service; this is not end-to-end encrypted storage.
- Export and delete saved records on any plan.
- Optional analytics and shared category learning require your consent.
Who is responsible
Lorem ipsum (legal operator placeholder) is the data controller for ExpenseLense.
Lorem ipsum (business address placeholder)
Privacy contact: aiacobe@icloud.com.
What we collect
We collect account and sign-in details; files, emails, notes, and records you add; extracted merchant, date, amount, category, item, and recurring-charge details; Insight questions and answers; plan and billing state; support messages; and limited service diagnostics.
Why we use it
- To provide the service: sign-in, importing, organizing, searching, exporting, Insight, support, and billing are processed to perform our agreement with you.
- To protect and maintain the service: limited diagnostics, fraud prevention, usage limits, and service milestones are processed for our legitimate interests in a safe, reliable product.
- To comply with law: we may retain billing and other information required for legal obligations.
- With your consent: optional visitor analytics and shared category learning are off until you enable them. You can withdraw consent without affecting earlier lawful processing.
AI and email processing
OpenAI receives receipt or statement content for extraction. Insight receives your question, recent conversation context, and relevant saved-record data. Requests are sent with response storage disabled. This is not a zero-retention guarantee: OpenAI says API data is not used to train its models by default, but abuse-monitoring retention may apply. Resend processes forwarded email and attachments.
Read OpenAI’s API data controls for its provider policy.
Merchant information
To identify a business and suggest a category, we may look up a merchant name or description, country, and business tax identifier using OpenAI web search. Romanian business tax identifiers may also be checked against the public ANAF registry. These lookups do not include transaction amounts or dates. Public business information can still be incomplete; you can correct the resulting category.
File safety checks
Cloudmersive receives uploaded or emailed file contents to check for malware before extraction. The current testing configuration processes these files in North America. Cloudmersive states that its APIs process payloads without retaining copies after the transaction completes; this is the provider’s policy, not a guarantee that processing remains within your country. We keep private, account-scoped scan results and file fingerprints to avoid repeating checks on unchanged files. Previously saved files are checked when reprocessed.
Category learning
If you turn it on, normalized merchant and item names may be combined with the category you confirmed across participating accounts to improve suggestions. Receipt files, amounts, and dates are excluded. You can turn it off and clear its history in Account privacy.
Your records, on every plan
Viewing and downloading saved source files and viewing, editing, exporting, and deleting saved records do not require a paid plan. Limits apply to automated processing, reprocessing, and Insight usage.
Service providers
- Clerk: account identity and sign-in.
- Supabase: saved records, conversations, and private source files.
- Vercel: app hosting and request processing.
- Cloudmersive: file contents for malware checks.
- OpenAI: extraction, category suggestions, merchant research, and Insight.
- Resend: forwarded emails and attachments.
- Stripe: subscription and payment processing. ExpenseLense does not store full payment-card details.
- Sentry: minimized technical error diagnostics.
- Support mailbox provider: messages you choose to send to support.
Analytics and device storage
Required storage supports sign-in, security, and device preferences. After you allow optional visitor analytics, an anonymous ID and campaign details are stored on this browser and sent to ExpenseLense with visit and interaction events. Analytics consent expires after one year; anonymous events are scheduled for deletion after 365 days. Turning analytics off stops future optional collection. If you open an invite link, its signed referral code is stored separately for up to 30 days to attribute a later checkout, even when analytics is off. With analytics enabled, that code can also accompany optional events. Deleting your account data clears the stored code from this browser. Separately, we record a small set of signed-in service milestones, such as account creation, first record, and billing state, without receipt contents or financial details. We do not sell personal data or use it for cross-site advertising.
Optional visitor analytics
Not allowed on this browser.
Retention and deletion
Your records remain until you delete them or delete your ExpenseLense data. You can do this on any plan while keeping your sign-in account active. Product records are removed first; receipt-file cleanup then finishes in the background before you can add new records again. Hiding an email import only changes its visibility; it does not delete files or saved records.
Inactive Insight conversations are archived after 90 days, not deleted. Limited billing, security, usage-limit, deletion-protection, and support records may remain for legal obligations, disputes, abuse prevention, or safe service operation. Provider backups and provider-side records follow their own retention terms, not an immediate-erasure guarantee.
Deleting ExpenseLense data does not cancel your subscription or delete your sign-in account. For account closure or a wider personal-data request, contact us.
International processing
Some providers process data outside the European Economic Area, including the file safety checks in North America described above. The location of your device does not determine where processing happens.
To fill: confirm the contracted processing regions, applicable transfer safeguards, and how to request a copy of those safeguards for each provider before public launch.
Your choices and rights
You can edit, export, or delete records; control category learning and optional analytics; and request access, correction, deletion, restriction, objection, or portability where applicable. Automated categories and recurring suggestions organize records; they do not decide your eligibility for credit, insurance, or other services.
Use Account privacy for self-service controls. You can also email us for a request. We may need to verify account ownership. Under the GDPR, we normally respond within one month; if a permitted extension is needed, we explain it within that first month.
You may complain to a data-protection authority, including Romania’s ANSPDCP, or the authority where you live or work.
Age, changes, and contact
ExpenseLense is for people aged 18 or older. We may update this notice as the service changes and will revise the date above. Contact aiacobe@icloud.com with privacy questions or requests.