Budgeta

1. Introduction

At Budgeta, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our recurring expense tracking application.

2. Data Controller

The data controller for your personal data is Budgeta. For contact information, please use the contact form available in the application.

3. Information We Collect

We collect the following types of information:

Account Information

• Email address (for account creation and communication)
• Name (for personalization and account identification)
• Password (encrypted and securely stored)
• Google account information (if using Google Sign-In)

Expense Data

• Recurring expense names and descriptions
• Amount and currency information
• Billing cycle and payment dates
• Expense categories

Technical Information and Cookies

• Essential session cookies to keep you logged in and secure the Service
• Device and browser information
• Basic server logs (IP address, browser type) for security and abuse prevention

Optional AI Assistant Data

• Questions you choose to send to Ask Budgeta
• The expense fields needed to answer your question or prepare a requested change
• Limited usage information, such as message and token counts, for cost and abuse controls

4. How We Use Your Information

We use your information for the following purposes:

• Providing and maintaining the expense tracking service
• Processing your account registration and authentication
• Sending important service updates and notifications
• Improving our application and user experience
• Providing customer support and responding to inquiries
• Providing the optional Ask Budgeta assistant and preparing changes that you explicitly review and confirm

4a. Ask Budgeta and AI Processing

When you choose to use Ask Budgeta, your question and the minimum relevant expense data are sent to OpenAI, our AI service provider, to generate a response and select Budgeta tools. We do not give the AI direct database access. Expense creation, updates, and deletion remain pending until you review and confirm the exact action in Budgeta.

AI answers may be incomplete or incorrect. Amounts described as scheduled, due, or estimated are calculated from the billing information you entered and do not confirm that a bank payment occurred. Chat messages are not stored as permanent conversation history by Budgeta in the initial beta, although limited operational records and the AI provider's applicable API processing may still apply.

5. Legal Bases for Processing

We process personal data based on:

• Contract (to provide the Service you requested)
• Legitimate Interests (to maintain and improve the Service, secure our systems)
• Consent (where you explicitly agree, e.g., optional communications)

6. What We Do NOT Collect

We want to be clear about what we do not collect:

• Bank account numbers or credit card information
• Social Security numbers or government IDs
• Personal financial statements or tax documents
• Location data or GPS coordinates
• Personal communications outside Budgeta or messages you do not choose to submit to Ask Budgeta
• Browsing history outside of our application

7. Security

We use reasonable technical and organizational measures to protect your personal data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We also minimize operational logs and retain them only for short periods (typically 7–30 days) to maintain security and prevent abuse.

8. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties. We may share your information only in the following limited circumstances:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and safety
• With service providers who assist in operating our application (under strict confidentiality agreements)

9. Your Rights

Subject to local laws, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, please contact us through the contact form available in the application. We will respond within a reasonable period.

When you delete your account, your data is removed from production systems immediately, with encrypted backups purged automatically within 30 days.

10. Data Retention

We retain your data while your account is active. When you delete your account, we permanently delete your personal data from our production systems immediately.

Residual copies may remain in encrypted system backups for up to 30 days until those backups are automatically purged. Backups are used solely for disaster recovery and are not restored for individual requests.

We may retain minimal information if required by law or to resolve active disputes; otherwise, we delete data as described above.

11. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, please contact us through the contact form available in the application to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with the "Last updated" date. If changes materially affect your rights, we will provide additional notice.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through the contact form available in the application. We do not provide direct email support. We are committed to addressing your concerns and protecting your privacy.