Privacy Policy

1. Introduction

SpendTab ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services at spendtab.com and app.spendtab.com.

By accessing or using SpendTab, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account information: Your name, email address, and password when you create an account.
• Business information: Business names, descriptions, and settings you add to your accounts.
• Financial data: Transaction records, income entries, expenses, budgets, invoice details, and categories you enter into the platform.
• Payment information: Billing details processed through our payment provider (Paystack). We do not store full card numbers on our servers.
• Communications: Messages you send us via email or support channels.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, clicks, and session duration.
• Device information: Browser type, operating system, IP address, and device identifiers.
• Cookies: Session tokens and preference cookies necessary for the application to function. See Section 7 for details.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the SpendTab platform
• Process your transactions and manage your subscription
• Send you account-related notifications (receipts, billing alerts, product updates)
• Respond to your support requests and enquiries
• Improve our product through aggregated, anonymised usage analytics
• Detect and prevent fraud, abuse, and security incidents
• Comply with applicable laws and regulations in Nigeria

We do not sell your personal data or financial data to third parties. We do not use your financial records for advertising purposes.

4. How We Share Your Information

We may share your information only in the following limited circumstances:

• Service providers: Trusted third-party vendors who help us operate SpendTab (e.g. Supabase for database hosting, Paystack for payment processing, Resend for transactional email). These providers are contractually bound to protect your data and may only use it to provide services to us.
• Legal requirements: If required by law, court order, or government authority in Nigeria or any applicable jurisdiction.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before this occurs.
• With your consent: In any other circumstances with your explicit permission.

5. Data Security

We take the security of your data seriously. SpendTab uses:

• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for sensitive data at rest via Supabase
• Row-level security policies so users can only access their own data
• Regular security reviews and access controls

Despite these measures, no system is 100% secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorised access to your account.

6. Data Retention

We retain your account and financial data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain certain records (e.g. financial transaction logs for tax compliance purposes), which may be retained for up to 7 years.

7. Cookies

SpendTab uses the following types of cookies:

• Essential cookies: Required for authentication and session management. The application cannot function without these.
• Preference cookies: Store your settings such as selected currency and active account.
• Analytics cookies: Anonymised usage data collected via PostHog to help us improve the product. No personally identifiable information is included.

You can disable non-essential cookies through your browser settings. Disabling essential cookies will prevent you from logging in.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your account and associated data.
• Portability: Request an export of your financial data in a machine-readable format.
• Objection: Object to certain processing of your data.

To exercise any of these rights, email us at hello@spendtab.com. We will respond within 30 days.

9. Children's Privacy

SpendTab is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Your continued use of SpendTab after changes take effect constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: