Last updated October 22, 2026
The short version
- Only you can see your bank information here. Our staff can’t.
- We never see your bank password.
- We never sell your data.
- You can delete your account and all its data, from Security.
Business Spend helps small businesses keep their books: it brings in bank transactions, files them by project, and checks each month against the bank’s statements. This policy explains what we collect, why, who helps us process it, how long we keep it, and the choices you have. In short: your financial data is used only to run your books, only you can see it, and we never sell it.
Who we are
Business Spend is operated by Ikechukwu Azogu (“we”, “us”). For any privacy question or request, email iazogu@gmail.com.
What we collect
- Your account: your name, business name, email address, and password (stored only as a salted hash, never in readable form).
- Bank data, when you connect a bank through Plaid: account names and the last digits of account numbers, balances, and transactions (date, amount, store and bank description). We never see or store your bank username or password; you sign in at your bank through Plaid.
- Bank files, when you upload one: every transaction line from a file you download from your bank’s website (date, amount, store and the bank’s description, money in and money back as well as charges), the bank’s name, the last digits of the account number, and the balance and its date when the file shows one. The file is read on your phone or computer and never sent to us; only those lines and details are, and they’re kept in your books like any bank’s.
- What you add: projects, rules, crew hours, how you file each transaction, and months you close.
- Technical data: our hosting and database providers record requests, errors and sign-in events (for example IP address, browser and time) to keep the service running and secure.
How we use it
- To provide the service to you: filing transactions, your daily report and overview, and balancing each month.
- To keep your account and data secure, and to support you when you ask.
We don’t use your data for advertising, we don’t sell your data, and we don’t share it except with the service providers below, which process it on our behalf.
Connecting your bank with Plaid
We use Plaid Inc. (“Plaid”) to connect your bank accounts. When you connect, Plaid asks for your consent and collects your data under its own End User Privacy Policy. You can disconnect a bank at any time on the Bank accounts page, and you can also manage your connections at my.plaid.com.
AI suggestions
Business Spend suggests how to file each purchase. Most suggestions come from your own rules and simple built-in checks. When you choose Ask AI on an item, we send that one transaction’s store name, amount, date and bank description, your project names, and how you filed that store before, to an AI model (Qwen, from Alibaba Cloud) through Vercel’s AI Gateway to get a suggestion. We never send account numbers, balances, statements or credentials. The AI’s answer is only a suggestion until you accept it.
Who processes your data
- Plaid
- Connecting your bank accounts and retrieving your bank data
- Supabase
- Storing your data and managing sign-in
- Resend
- Sending the sign-in code we email each time you sign in, password reset links, and account and bank emails, such as a note when your bank stops sending
- Vercel
- Hosting the application; the AI Gateway for Ask AI
- Alibaba Cloud (Qwen)
- Answering Ask AI requests, only when you ask
We may also disclose information if the law requires it, or to protect our users’ safety and rights.
How we protect it
Your data is encrypted in transit (TLS) and at rest. Each business’s data is isolated in the database so that only its owner can read it. Our administrators manage sign-ins but cannot see anyone’s bank accounts, balances or spending. Access to our systems requires two-factor authentication.
How long we keep it
- We keep your data while your account is open, so your books stay complete.
- When you disconnect a bank, we stop receiving new data from it; the transactions already in your books stay unless you delete them.
- When you ask us to delete your account, we delete your account and all of your data within 30 days. Copies in our providers’ backups expire on their normal schedule.
Your choices and rights
You can ask us to show you, correct, export or delete your data, or withdraw your consent, by emailing iazogu@gmail.com. We answer within 30 days. Depending on where you live, you may have additional rights under local privacy laws, and we honor them.
Children
Business Spend is for businesses and isn’t meant for anyone under 18.
Changes to this policy
If we change this policy, we’ll update the date above. If a change is significant, we’ll let you know in the app or by email before it takes effect.