Privacy Policy

Who we are

Budget Agent ([Your LLC legal name, once formed], "we," "us") operates the Budget Agent website and application (the "Service"), a personal budgeting tool that extracts data from receipts you upload and helps you categorize and track your own spending.

What we collect

When you create an account, we collect:

• •Your email address and a securely hashed password (we never store your actual password).
• •Optionally, a two-factor authentication secret, encrypted at rest.
• •The plan you're on (Free, Plus, Pro, or Business) and, if you subscribe, billing status from Stripe — we never see or store your full card number; Stripe handles that directly.
• •Your confirmation that you're 18 or older and that you agree to the Terms and this policy, with the date and the version you agreed to.

When you upload a receipt, we collect:

• •The image or PDF you upload.
• •Merchant name, transaction date, line items, subtotal, tax, tip, and total, extracted from the image.
• •The category and subcategory you choose for that purchase — we never choose this for you.
• •If a payment card number is visible in the image, we mask it to the last 4 digits at the moment of extraction and never store or transmit the full number, even temporarily.

If you use the AI chat or AI budget builder features (Plus/Pro plans), we store the messages you send and the responses you receive.

Depending on the features you use, we also store what you choose to enter: the names (and, optionally, last four digits) of the cards you spend on — never a full card number; your debts and their interest rates; how you are paid and your state, if you set up pay tracking; your recurring bills; and, for a Business account, your clients' names, emails, phone numbers and billing addresses, your projects, costs, time and invoices. If you use the mobile app and allow notifications, we store your device's notification token so we can send reminders, and we remove it when you sign out.

To protect accounts we briefly keep the IP address and account email of recent login attempts (for rate limiting); these records are deleted after about a day. Financial information can be sensitive personal data under some state laws; we only process it with the consent you give when you create your account.

We automatically log security-relevant events — logins, another person (e.g. support) viewing your data, and corrections to your data — in an append-only audit log, which you can view yourself at any time.

How we use it

• •To extract and display the details of your receipts for your review — you always confirm or correct this before it's saved.
• •To calculate your monthly spending by category and compare it against any budget targets you set.
• •To generate a plain-language monthly summary of your spending, using an AI model to phrase numbers we've already calculated — the AI never invents a figure.
• •To detect likely duplicate uploads and flag possible data-entry mismatches for you to resolve.
• •To bill your subscription, if you're on a paid plan.
• •To secure your account (rate-limiting login attempts, detecting suspicious access).

We do not use your data to train AI models, and we do not sell your personal information.

Who we share it with

We use a small number of service providers to run Budget Agent. Each only receives the data it needs to do its job:

• •Vercel — hosts the application, stores uploaded receipt files, and counts page views with cookieless analytics (no account details, receipt content or amounts are included).
• •Neon — hosts our database.
• •Anthropic — processes receipt images and chat messages to extract data and generate summaries, when the AI features are switched on. (As of this draft, real AI processing is not enabled — receipt data is not sent to Anthropic until a data processing agreement with them is in place, and we will update this page when that changes.)
• •Stripe — processes subscription payments, if you're on a paid plan. We never see your full card number. (If we later offer card payment links for a Business account's clients, Stripe would process those payments directly between the client and the business.)
• •Google (Firebase Cloud Messaging) and Apple (APNs) — deliver push notifications to the mobile app, if you allow them; they receive only a device token and the short reminder text.
• •Resend — delivers transactional emails (e.g. password reset links, and invoices a business account sends to its own client).

We do not share your data with anyone else, and we do not sell it or share it for targeted advertising.

If you use a business account

A business account can keep its own clients' names, email addresses and billing addresses so it can invoice them. That information belongs to the business that entered it. We use it only to show it to that business and to address and send the invoices it chooses to send; we never share it, sell it, or use it for advertising, including after a project is finished. A business can remove a client or delete its account at any time. If you are a client and want information about you removed, contact the business that invoiced you, or write to us and we will pass it on.

How long we keep it

We keep your data for as long as your account is active. If you delete your account, we cancel any paid subscription, delete your Stripe customer record, and delete your receipts (including the uploaded files), transactions, budget targets, cards, debts, business records and monthly summaries. Records of security events involving your account (the audit log) are retained after deletion, without your other personal data attached, to preserve an accurate security record. Temporary security records (login-attempt limits, password-reset tokens) are removed automatically within days.

[Draft note: we do not currently auto-delete data for accounts that are simply inactive but never explicitly deleted. Whether to add an automatic retention/deletion period, and how long, is an open decision — flag this for the attorney review.]

Your rights

You can, at any time, from your account settings:

• •Access and export a copy of your data (a JSON download of everything we hold about you, including any business records, and a spreadsheet of your transactions).
• •Correct any receipt or transaction detail.
• •Delete your account and all associated data.
• •Opt out of any sale of personal information or targeted advertising — as noted above, we don't do either, so there's nothing to opt out of today.

If you can't sign in, or you're a client of a Business account who wants information about you handled, use our request page or write to support@budgetagentapp.com. We answer within 45 days; if we need more time we'll tell you why and take up to another 45 days. If we decline a request you can appeal by replying to our answer, and we'll respond to the appeal within 60 days. If you're still not satisfied you can contact your state attorney general.

[Draft note: this section should be reviewed against Indiana's Consumer Data Protection Act and any other state law that applies — timelines, appeal rights and the sensitive-data consent — as part of the attorney review.]

Cookies and analytics

We use only the cookies needed to keep you signed in and to protect forms from forgery. We measure page views with Vercel's cookieless analytics, which sets no cookies and doesn't include your account, receipts or amounts. We don't use advertising or cross-site tracking cookies.

Security

• •Data is encrypted in transit (HTTPS) and at rest.
• •Receipt images are stored privately and only ever served back to you through an authenticated request tied to your own login session — never a public link.
• •Two-factor authentication is available on every account.
• •Login attempts are rate-limited to reduce the risk of a stolen password being used to break in.
• •Every read of your data by anyone other than you (e.g. customer support investigating an issue) is logged.

Children's privacy

Budget Agent is not directed at children, and we do not knowingly collect data from anyone under 18.

Changes to this policy

If we make a material change to this policy, we'll update the date at the top of this page and, where required, notify you directly.

Contact us

Questions about this policy or your data: support@budgetagentapp.com