Privacy Policy

Effective date: February 23, 2026

SpendexAI ("we", "us", "our") operates the spendexai.com website and the SpendexAI API proxy service. This page informs you of our policies regarding the collection, use, and disclosure of personal data.

1. Data We Collect

We collect the following categories of information:

• Account data: Email address, name, and authentication credentials when you create an account.
• Usage data: API request metadata (timestamps, model selected, token counts, response latency). This is used for billing, analytics, and routing optimization.
• Payment data: Processed securely through our payment provider. We do not store full credit card numbers.

2. Prompt Data

We do not store or log your prompt content. Our routing classifier analyzes prompt complexity signals (length, structure, token count) in real-time to select the optimal model. The prompt content itself is forwarded directly to the upstream AI provider and is never persisted on our servers.

3. How We Use Your Data

• To provide and maintain the SpendexAI service
• To process billing and manage your subscription
• To optimize model routing and improve service quality
• To communicate service updates and respond to support requests
• To detect and prevent fraud or abuse

4. Data Sharing

We do not sell your personal data. We share data only with:

• AI providers (OpenAI, Anthropic, Google, Mistral): Your prompts are forwarded to the selected provider to fulfill API requests.
• Payment processors: To handle billing transactions.
• Law enforcement: If required by law or valid legal process.

5. Data Security

• All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
• API keys are stored using one-way hashing
• Provider tokens are isolated per-tenant
• PCI-minded architecture with regular security audits

6. Data Retention

Account and usage metadata is retained for the duration of your account plus 30 days after deletion. Prompt content is never stored.

7. GDPR Rights (EU Users)

If you are located in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict processing

To exercise these rights, contact us at contact@spendexai.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our website.

10. Contact Us

For any questions about this privacy policy, contact us at contact@spendexai.com.