Privacy Policy
Updated 25 October 2026
Spendpoint is an expense ledger used through AI assistants. This page says what it keeps, where, who can see it, and for how long, in plain words. It is short because the service keeps little.
Who operates Spendpoint
Spendpoint is run by its operator, a private individual. Questions about this policy and requests about your data go to [email protected].
What is stored
- Your ledger: the receipts your assistant records: merchant, date, time, total, VAT and its summary per rate, currency, category, the receipt number, the merchant's tax number, how it was paid (cash, card, transfer or other, never card digits), each line with its quantity and amount, any note you dictated, a label and a reimbursement state when you gave one, any monthly budgets you set, and the assistant's transcription of the receipt. The transcription contains whatever was printed, which may include loyalty numbers or the last digits of a card.
- Your account: a keyed hash of your email address, your password as an argon2 hash, when the address was verified, and which version of the terms you accepted and when. The address itself is never stored.
- Your connections: which assistant applications you granted access, when, with what scope, and when each last made a call. Tokens are stored as hashes.
- Logs: each operation, the account it acted for (by an opaque id), the assistant application, and the time. Never the contents of a receipt, never an address.
What is not stored
No email addresses, no receipt images (they stay with you and your assistant), no payment details, no location, no analytics, no advertising identifiers. The site uses no cookies.
Where
On a server in Stockholm, Sweden, in the European Union, run by Amazon Web Services. Encrypted backups are kept in the same region for 35 days. Traffic passes through Cloudflare, which terminates TLS and protects the service. Mail is sent through Amazon SES.
Who can see your data
- You, through the assistants you connect. Each assistant acts under a grant you gave on the consent page and can be disconnected at any time.
- Your assistant's provider (Anthropic for Claude, OpenAI for ChatGPT, xAI for Grok, Anysphere for Cursor) processes what you show it under its own terms and privacy policy. Spendpoint sends them only what the tools return.
- Nobody else. Every owner's rows are kept apart by the database itself. The operator can count entries and see which applications are connected, and is refused the contents of any ledger by the database.
Your address is used at three moments only: to send the verification link when you create an account, to send a reset link when you ask for one, and to tell you if someone tries to register an address that already has an account. Nothing else is ever sent. At most one message an hour goes to an address.
How long
| Your ledger and account | For as long as the account exists. |
| Accounts never verified | Deleted after a day. |
| Verification and reset links | A day and an hour respectively, then deleted. |
| Backups | 35 days. |
| Logs | A few weeks, rotated. |
Your rights
- Export everything at any time by asking your assistant, as JSON or CSV.
- Correct any entry through your assistant; the original is kept and linked.
- Disconnect any assistant through your assistant, or reset your password, which disconnects them all.
- Delete your account on the account page. Everything goes at once; backups age out within 35 days.
If you are in the European Union or another place with data-protection rights, those rights apply, and the address above is where to exercise them.
Changes
If this policy changes, the date at the top changes and your assistant will be told through the service's own instructions. Material changes are announced before they take effect.