Spentax Privacy Policy

We receive identifiers and account details such as your name, email, phone number if provided, language, protected credentials and verification records. We handle technical data such as IP address, browser or device details, sessions, activity and security events. We may also receive support requests, invitations, referral codes and permission records.

When you use profiles, we receive expenses and documents you upload, their metadata, extracted fields and your corrections. Documents may contain financial data or information about other people. Upload only what you have the right to process, and avoid full card numbers, banking credentials or unnecessary sensitive information. If you choose to attach location when confirming a receipt, we receive the coordinates, accuracy and time linked to the record. You can change permission on your device. If you use available biometric unlocking, your operating system performs the verification and Spentax receives the verification result.

For purchases, when available, we receive billing details, transaction references, payment status, amounts and taxes. Your payment provider or store may collect payment credentials directly. If you join our affiliate program, we may request tax and payout information through a secure channel.

We use data to authenticate users, provide selected features, store records, suggest receipt details, manage permissions and referrals, handle requests, bill, prevent abuse and meet legal obligations. Extraction may run on your device. For server extraction, we send a prepared image and instructions to our AI provider, currently OpenAI, to obtain suggested fields. You can review and correct the results.

We share necessary data with infrastructure, storage, security, messaging, AI and support providers and, when enabled, billing and payment providers. Authorized collaborators may see receipts and expenses based on their profile permissions. We may disclose data to meet a legal obligation, respond to an incident, protect rights or carry out a corporate transaction subject to applicable safeguards. Some providers may process data outside the state or country from which you use the service.

For the practices described here, Spentax uses storage and cookies for sessions, security, language and invitation attribution. Spentax does not sell personal data or share it for cross-context behavioral advertising. If that practice changes, we will update the notice and provide any required choices before processing.

We keep account information while we provide the service and for as long as needed to resolve requests, document consent, prevent fraud or meet legal obligations. We retain active profile records according to the owner’s instructions and the applicable retention policy. After closure, we delete or deidentify data as appropriate under the disclosed timeframes, with exceptions for billing, security, backups, third-party rights and legal obligations. Deleting a collaborator’s account does not by itself delete records belonging to an organization. We apply access controls and review permissions to protect information.

Depending on your state and the data involved, you may request confirmation, access and a portable copy, correction, deletion and information about recipients. Where applicable, you may limit certain uses of sensitive data or opt out of sale, advertising-related sharing, targeted advertising or certain automated profiling. We honor legally required preference signals for applicable processing. Submit requests to [email protected]. We verify identity using information proportionate to the request. You may use an authorized agent where permitted. If we deny a request and the law provides an appeal, we explain how to appeal through the same channel and contact the relevant authority. We do not discriminate for exercising protected rights.

Spentax is offered to adults 18 and older. If you believe a minor provided information through an account, contact us so we can investigate. We publish the effective date of updates and give notice of material changes and new choices where appropriate.

We use SendGrid to deliver account email and, when the channel is available and you authorize it, Twilio for SPENTAX 2FA text codes. We retain channel choices, dates, accepted disclosure versions, and delivery and opt-out records as needed to document and honor your instructions. Frequency depends on your requests and security events; one code is sent per request. Message and data rates may apply.

We do not sell or share mobile numbers, SMS enrollment information or SMS consent with third parties or affiliates for their own marketing or promotional purposes. Providers that deliver and secure messages receive only the information necessary to perform that service on our behalf. Other data-sharing provisions do not authorize sharing SMS consent for promotional purposes.

You can adjust available notifications in your account, unsubscribe from promotional email through its link, and reply STOP to the SMS sender to stop the program. For help, reply HELP or email [email protected]. You can verify access by email. The SMS Terms describe the scope of each choice.

SMS Terms →

YOVIRT LLC, 1250 W Sam Houston Pkwy S, Suite 800, Houston, TX 77042, USA. To exercise rights, get help with a data request or withdraw consent, email [email protected]. You can also request deletion in Account, Delete Account. We verify the request and explain any data that must be retained and why. Applicable rights outside the United States remain available where required.

Request account deletion →