Spendoza privacy policy
Spendoza is a personal and household finance tracker on the web at spendoza.io, made by Gravitaz LLC. This page explains what it collects, what it does with it, and how to delete it.
The short version
You give Spendoza your bank statements so it can sort your spending. It keeps the transactions it finds and deletes the statement file once processing finishes. OpenAI reads your statements to do that sorting. Spendoza has no ads and doesn’t sell your data, and you can delete your account and everything in it from your Profile at any time.
Your account
- your email address
- your password, which our sign-in provider stores only as a hash
- your display name, and a profile photo if you add one
- your time zone, read from your browser so emails arrive at the right hour
- your email report settings and your plan
- invite codes you create, and who used them
A profile photo is stored at a public address: anyone who has the link can see it.
If you join the waitlist instead, we store your name, email address, IP address and the approximate location (country, region and city) that IP address points to.
Bank statements
You upload statements as PDF or CSV files. From each one, Spendoza stores:
- each transaction’s date, description, amount, whether it’s a debit or credit, and its category
- the bank name and the last four digits of the account number
- the file name, and a fingerprint of the file used to spot duplicate uploads
- the statement’s totals
The file itself is deleted once processing finishes. If processing fails, the file is kept so you can retry, until you retry successfully or remove the statement. Removing it deletes the file. If a statement ever gets stuck processing, email hello@gravitaz.net and we’ll remove it and its file. Spendoza doesn’t store your account balances or your full account number.
Things you add
Spendoza also stores what you enter yourself: income and expenses, categories, savings and budget goals, and debts (name, type, balance, interest rate and minimum payment). It finds recurring bills and income in your transactions and stores those too.
AI processing
Spendoza uses OpenAI’s API for these features. Here is what each one sends:
- Reading a statement: the full text of the statement. That usually includes whatever the bank printed on it, such as your name and address.
- Sorting transactions: each transaction’s description, amount and type, and your category names.
- Naming recurring bills and income: their descriptions.
- Report insights and goal suggestions: your totals, category breakdown, debts and goal names.
- The financial advisor: your question; summaries of up to six monthly reports; your income sources, recurring expenses, debts and goals; and earlier messages in the same conversation.
Spendoza doesn’t add your name or email address to any of these. Your advisor questions and answers are saved in your account so you can see your history.
Report emails
Spendoza emails you a weekly report, plus quarterly and yearly ones, with a summary and a PDF of your report attached. They’re on by default. Turn them off in Profile, or use the unsubscribe link in any report email.
Households
On the Pro plan you can create or join a household. Other members see your display name, your sharing settings, and the totals and category breakdown of whatever you choose to share. They don’t see your individual transactions. Household goals and debts can be edited by any member, and a transaction or income entry assigned to a member is visible to that member.
Connecting an AI assistant
If you connect an AI assistant to Spendoza (such as Claude or ChatGPT, through Spendoza’s MCP server), you sign in to Spendoza to allow it. The assistant can then read your Spendoza data and add, change or delete income, expenses, goals and debts, depending on your plan. Whatever it reads is sent to that assistant’s provider and handled under their privacy policy. To disconnect, choose Disconnect AI assistants on the MCP page. That signs out every other session, including connected assistants: Spendoza stops accepting their sign-in right away, and the sign-in itself expires shortly after.
Payments
Paid plans are handled by Stripe. Spendoza creates a Stripe customer with your email address and stores your Stripe customer and subscription IDs and your plan’s status. Your card details go to Stripe directly; Spendoza never sees them.
Services that process your data
- Supabase: the database, file storage and sign-in
- Vercel: hosting the website, the API and the MCP server
- OpenAI: the AI features above
- Stripe: payments
- Resend: sending report emails
- ip-api.com: looking up the approximate location of waitlist sign-ups
Each receives only what it needs to do its job. Like any web request, they see your device’s IP address as part of normal network traffic.
Cookies and analytics
Spendoza sets no cookies. Your browser’s local storage keeps you signed in and remembers your light or dark theme. Spendoza counts page views with Vercel Web Analytics, which doesn’t use cookies, and loads its font from Google Fonts.
Who at Gravitaz can see your data
Spendoza’s admin tools show a list of accounts (display name, email address, plan and sign-up date) and usage totals. To fix a problem, an admin can regenerate your report, which shows your report’s contents. Your data is never sold or used for advertising.
Deleting your data
To delete everything, go to Profile and choose Delete my account. It permanently deletes your account and your data: your profile and photo, statements and transactions, income, expenses, categories, goals, debts, reports, advisor history and email settings, and it cancels your subscription.
You can also delete individual income and expense entries, categories, goals, debts and failed statements. Transactions can be edited but not deleted one at a time.
If you’re the head of a household with other members, transfer ownership before deleting your account. Household goals and debts you created stay with the household. Stripe keeps its own records of past payments, and copies in our providers’ logs and backups expire on their own schedules.
Children
Spendoza isn’t directed to children under 13, and we don’t knowingly collect their personal information. If you think a child under 13 has an account, email hello@gravitaz.net and we’ll delete it.
Changes
We’ll update this page and its date if Spendoza’s data practices change.
Contact
Questions about this policy? Email hello@gravitaz.net.
Need help with the app? See Spendoza support.