Privacy Policy

Who we are

Budget Agent ([Your LLC legal name, once formed], "we," "us") operates the Budget Agent website and application (the "Service"), a personal budgeting tool that extracts data from receipts you upload and helps you categorize and track your own spending.

What we collect

When you create an account, we collect:

• •Your email address and a securely hashed password (we never store your actual password).
• •Optionally, a two-factor authentication secret, encrypted at rest.
• •The plan you're on (Free, Plus, or Pro) and, if you subscribe, billing status from Stripe — we never see or store your full card number; Stripe handles that directly.

When you upload a receipt, we collect:

• •The image or PDF you upload.
• •Merchant name, transaction date, line items, subtotal, tax, tip, and total, extracted from the image.
• •The category and subcategory you choose for that purchase — we never choose this for you.
• •If a payment card number is visible in the image, we mask it to the last 4 digits at the moment of extraction and never store or transmit the full number, even temporarily.

If you use the AI chat or AI budget builder features (Plus/Pro plans), we store the messages you send and the responses you receive.

We automatically log security-relevant events — logins, another person (e.g. support) viewing your data, and corrections to your data — in an append-only audit log, which you can view yourself at any time.

How we use it

• •To extract and display the details of your receipts for your review — you always confirm or correct this before it's saved.
• •To calculate your monthly spending by category and compare it against any budget targets you set.
• •To generate a plain-language monthly summary of your spending, using an AI model to phrase numbers we've already calculated — the AI never invents a figure.
• •To detect likely duplicate uploads and flag possible data-entry mismatches for you to resolve.
• •To bill your subscription, if you're on a paid plan.
• •To secure your account (rate-limiting login attempts, detecting suspicious access).

We do not use your data to train AI models, and we do not sell your personal information.

Who we share it with

We use a small number of service providers to run Budget Agent. Each only receives the data it needs to do its job:

• •Vercel — hosts the application and stores uploaded receipt files.
• •Neon — hosts our database.
• •Anthropic — processes receipt images and chat messages to extract data and generate summaries, when this feature is active. (As of this draft, real AI processing is not yet enabled — receipt data is not sent to Anthropic until a data processing agreement with them is confirmed.)
• •Stripe — processes subscription payments, if you're on a paid plan. We never see your full card number.
• •Resend — delivers transactional emails (e.g. password reset links).

We do not share your data with anyone else, and we do not sell it or share it for targeted advertising.

How long we keep it

We keep your data for as long as your account is active. If you delete your account, we delete your receipts (including the uploaded files), transactions, budget targets, and monthly summaries. Records of security events involving your account (the audit log) are retained after deletion, without your other personal data attached, to preserve an accurate security record.

[Draft note: we do not currently auto-delete data for accounts that are simply inactive but never explicitly deleted. Whether to add an automatic retention/deletion period, and how long, is an open decision — flag this for the attorney review.]

Your rights

You can, at any time, from your account settings:

• •Access and export a copy of your data (JSON download).
• •Correct any receipt or transaction detail.
• •Delete your account and all associated data.
• •Opt out of any sale of personal information or targeted advertising — as noted above, we don't do either, so there's nothing to opt out of today.

[Draft note: this section should be reviewed against Indiana's Consumer Data Protection Act's specific requirements — timelines for responding to requests, appeal rights, etc. — as part of the attorney review.]

Security

• •Data is encrypted in transit (HTTPS) and at rest.
• •Receipt images are stored privately and only ever served back to you through an authenticated request tied to your own login session — never a public link.
• •Two-factor authentication is available on every account.
• •Login attempts are rate-limited to reduce the risk of a stolen password being used to break in.
• •Every read of your data by anyone other than you (e.g. customer support investigating an issue) is logged.

Children's privacy

Budget Agent is not directed at children, and we do not knowingly collect data from anyone under 18.

Changes to this policy

If we make a material change to this policy, we'll update the date at the top of this page and, where required, notify you directly.

Contact us

Questions about this policy or your data: [a real contact email you can receive mail at]