The short version
- iSpend never asks for your bank login. It only ever sees the statement files you upload.
- What you upload is used for one thing: showing you where your money went. It is never sold, shared with advertisers, or pooled with anyone else’s data.
- There is no third-party tracking on any page: no analytics services, no pixels, no third-party scripts, no ads.
- To see how the service is doing, iSpend itself counts which days each account is used and for what kind of thing — importing, sorting, reading reports — never what you look at. If you arrived through a link with a campaign tag or from another site, that is noted once when you sign up; your browser keeps it until then, and it is never shared.
- You can download a copy of everything at any time, and delete your account yourself, from Settings › Your data.
What we collect, and why
Your account. A username, an email address and a password. The password is stored as a hash; nobody, including us, can read it. The email address is used to confirm your account, to reset a forgotten password, and to tell you about your trial and subscription. Now and then we may send news about iSpend; every such email has a one-click unsubscribe, and emails about your own account are unaffected by it.
Your statements. The spreadsheet, CSV or PDF files you upload, and everything iSpend reads out of them: dates, descriptions, amounts, and the categories, tags, splits, budgets and rules you build on top. Files are kept on our server so a statement can be re-opened or re-read later. Scanned PDFs are read by software running on our own server; no outside service sees them.
Billing. Payments go through Stripe. Your card number never touches iSpend; Stripe holds it. We keep a Stripe customer reference and the status of your subscription so we know what your account is entitled to.
Server logs. Like any website, our server records standard request logs, including your IP address, which we use to keep the service running and to limit sign-in attempts. Logs are kept for [LOG RETENTION] and then discarded.
AI, only if you turn it on
iSpend can suggest categories and write short insights using an AI model. That feature is off until you add your own OpenRouter key in Settings. Once it is on, the transaction descriptions you ask it to look at are sent to OpenRouter and the model provider you chose, under their terms. Leave it off and nothing of yours goes near an AI. Even switched on, it only suggests; nothing is applied without you.
Cookies
Two, both set by iSpend itself. A signed session cookie keeps you signed in, and it stops working the moment you change your password. A second cookie remembers whether you prefer the light or dark theme. Neither is used to track you, and there are no third-party cookies.
Who can see your data
You. Every screen in iSpend shows only your own accounts, statements and transactions.
Stripe sees what it needs to take payment, and OpenRouter sees what you send it if you turn AI on. No other company receives your data.
Administrators of this iSpend installation can see that your account exists, its status and a short activity log (sign-ins, statement imports and the like, kept for 30 days by default). They cannot read your password. They can also make a whole-application backup, which contains your data, so the service can be restored after a failure.
We will disclose data if the law genuinely requires it, and we will tell you when we are allowed to.
How long we keep it
For as long as your account exists. When a trial or subscription ends, nothing is deleted: the account goes read-only and you can still sign in, look at everything and download all of it. When you delete your account (Settings › Your data), any subscription is cancelled and your statements, transactions, files and settings are removed straight away. We keep only what bookkeeping requires — the invoices and the dates your subscription changed, under an account number with no name attached. Copies may survive in backups for up to [BACKUP RETENTION] before those are overwritten.
Your rights
Wherever you live, you can ask us to show you the data we hold about you, correct it, hand it over in a usable format, or delete it. Settings › Your data gives you a copy of everything we hold, including the files you uploaded, and deletes your account on request. For anything else, write to [CONTACT EMAIL] and we will answer within 30 days. If you are in the EU, the UK or another place with a data-protection authority, you also have the right to complain to it.
Security
Everything travels over HTTPS. Passwords are hashed, not stored. Sign-in attempts are rate-limited, and a password change signs out every other session. We keep the software up to date and keep the number of people who can reach the server small. No system is perfectly secure, so if we ever learn of a breach that affects you, we will tell you promptly and honestly.
Children
iSpend is for adults. You must be at least 18, or the age of majority where you live, to create an account. We do not knowingly collect data from anyone younger; if you think we have, tell us and we will delete it.
Changes to this policy
If we change what we collect or how we use it, we will update this page and, for anything that matters, email you before it takes effect. The date at the top tells you which version you are reading.
Contact
[COMPANY LEGAL NAME]
[MAILING ADDRESS]
[CONTACT EMAIL]