LAST UPDATED 26 SEPTEMBER 2026

Privacy Policy

Spendr provides cloud, AI, SaaS, and software-spend analytics for organisations. This policy explains how we collect, use, disclose, retain, and protect information when you visit our website, contact us, or use the Spendr service.

Scope

This policy applies to website visitors, people who contact us or request a walkthrough, and authorised users of a Spendr workspace. An organisation that provides your access may separately control how its billing data and user information are handled. Its instructions and agreements may also apply.

Information we collect

Information you provide. When you contact us or request a walkthrough, we may receive your name, work email address, organisation, role, preferred meeting time, technology stack, and anything you include in your message.

Account and workspace information. We process Google Workspace identity details such as your name, work email address, Google account identifier, and Workspace domain. We also process organisation membership, role, access requests, budgets, alerts, allocation settings, and other workspace configuration.

Connected-provider information. When an authorised administrator connects a provider, Spendr processes the credentials or connection details required to access that provider and the billing, usage, credit, account, project, service, resource, region, SKU, currency, and related metadata needed to provide cost reports.

Technical information. Our infrastructure may record information required to operate and secure the service, such as IP address, browser and device information, request timestamps, pages or endpoints requested, authentication events, and diagnostic or error logs.

Website analytics. We use Google Analytics to understand visits to our public website. Analytics may process page URLs, approximate location, browser and device information, referring pages, campaign parameters, and interactions such as contact or walkthrough clicks. We do not send the name, email address, company, role, technology stack, or message entered in our contact form to Google Analytics.

How we use information

We use information to respond to enquiries and arrange walkthroughs; authenticate users; create and administer organisation workspaces; enforce roles and organisation boundaries; validate provider connections; import and reconcile authorised billing data; provide cost analytics, budgets, alerts, anomalies, and customer APIs; monitor source freshness and service reliability; prevent abuse; troubleshoot problems; and comply with legal obligations.

We do not sell personal information or use it for consumer advertising, behavioural targeting, or unrelated profiling.

Legal bases

Where data-protection law requires a legal basis, we process information as necessary to provide the service or take requested pre-contractual steps, pursue legitimate interests in operating and securing Spendr, comply with legal obligations, or act on consent where we specifically request it.

How we share information

We may share information with authorised members of your organisation and with service providers that support hosting, storage, authentication, communications, monitoring, and other operational functions. We limit access to what is needed for those functions. We may also disclose information when directed by the relevant customer, as part of a corporate transaction, to protect rights or safety, or when required by law.

Provider access and security

Provider connections are designed for narrowly scoped billing and usage access and do not allow Spendr to modify provider resources. Provider credentials are encrypted, are not returned to the browser after submission, and are deleted when a connection is removed. Organisation data is separated using tenant access controls, and administrative actions are restricted by workspace role.

No system is completely secure. We maintain technical and organisational safeguards appropriate to the nature of the service, but we cannot guarantee that information will never be accessed, lost, or misused.

Retention

We retain information for as long as needed to operate the service, provide requested support, maintain security and audit records, resolve disputes, and meet legal or contractual obligations. Retention periods vary by data type and customer instruction. Removing a provider connection stops future imports and deletes its stored credentials; previously imported billing history may remain until the organisation or Spendr deletes it under the applicable agreement or retention process.

International processing

Spendr and its service providers may process information in countries other than the one where you live. Where required, we use appropriate contractual or other safeguards for international transfers.

Your rights and choices

Your organisation administrator controls workspace membership, roles, and connected data sources. Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to complain to a data-protection authority. We may need to verify your identity and coordinate requests concerning organisation-controlled data with the relevant organisation.

Children

Spendr is a business service and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as our service or legal obligations change. We will revise the “last updated” date and provide additional notice when required.

Contact

For privacy questions or requests, contact hello@spendr.ai.