Privacy Policy
Expensezzz is operated by postcard.exchange, LLC ("we," "us," "our"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over it. By using Expensezzz you agree to this policy.
1. Information we collect
Account information
When you sign up we collect your phone number, which serves as your account identifier. We use it to send you one-time login codes via SMS. If you choose to add a name or email to your profile, we store those too.
Expense and transaction data
Expensezzz collects the merchant name, amount, date, and category for each expense — whether it's imported from a connected bank, uploaded from a statement or receipt, or entered by hand. If you use multiple entities (for example a personal profile and a business), each entity's expenses are kept separate. Your expense data is private to your account.
Bank account data
If you connect a bank account, we do so through Stripe Financial Connections. We receive read-only access to your transaction history. We never have access to your banking credentials and cannot initiate transactions on your behalf. Stripe's handling of this data is governed by Stripe's Privacy Policy.
Subscription and billing data
Payments are processed by Stripe. We do not store your full card number or CVV. We receive and retain a payment method summary (e.g., card brand and last four digits), your subscription status, and billing history.
Usage and analytics data
We collect basic technical data such as your device type, browser, operating system, and the pages you visit within the app. We use Google Analytics to understand how the product is used so we can improve it. This data is aggregated and not used to advertise to you. See our Cookie Policy for the specifics.
2. How we use your information
- To provide and maintain the Expensezzz service
- To authenticate you and verify your identity
- To import, categorize, and organize your expenses
- To generate the exports and reports you ask for
- To process payments and manage your subscription
- To send you service notifications (e.g., when a new expense needs categorizing)
- To understand product usage and improve the service
- To respond to your support requests
- To comply with legal obligations
We do not use your data for advertising. We do not sell your data to third parties.
3. How we share your information
Your accountant or anyone you choose
When you use the "Share with accountant" feature, we generate a password-protected file of the expenses you select and, if you provide an email address, send a download link to the recipient you name. We share your expense data this way only at your direction, and we store the recipient's email and the share record so the link keeps working.
Supabase
We use Supabase to store and manage your data. Supabase acts as our data processor and is contractually bound to protect your information and use it only to provide services to us.
Stripe
We use Stripe for payment processing and bank connections. Information shared with Stripe is governed by Stripe's Privacy Policy.
Google Analytics
We use Google Analytics for aggregate usage measurement. Its handling of data is governed by Google's Privacy Policy.
Legal requirements
We may disclose your information if required to do so by law, court order, or government authority, or to protect the rights, safety, or property of Expensezzz or others.
4. Cookies and similar technologies
We use essential session cookies to keep you signed in, and Google Analytics cookies to measure usage. We do not use advertising or retargeting cookies. See our Cookie Policy for details.
5. Your rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Export your expense data (CSV, Excel, or PDF from the app)
- Disconnect your bank account at any time from within the app
To exercise any of these rights, contact us at contact@expensezzz.com. We'll respond within 30 days.
6. Data retention
We retain your data for as long as your account is active. If you delete your account, we'll delete your personal data within 30 days, except where we're required to retain it for legal or accounting purposes (typically up to seven years for billing records).
7. Security
We use industry-standard security measures including encryption in transit (TLS) and at rest. Access to production data is restricted to authorized personnel. That said, no system is perfectly secure — if you believe your account has been compromised, contact us immediately at contact@expensezzz.com.
8. Children's privacy
Expensezzz is not directed at anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us and we'll delete it promptly.
9. Changes to this policy
We may update this policy from time to time. We'll notify you of material changes via the app or by SMS. Continued use of Expensezzz after changes take effect constitutes your acceptance of the updated policy.
10. Contact
Questions about this policy? Reach us at:
contact@expensezzz.com
postcard.exchange, LLC
5013 South Louise Avenue PMB 1268, Sioux Falls, South Dakota 57108