Privacy Policy

Your privacy matters to us. This Privacy Policy explains how Overflow LLC, operating as Nexpend ("we," "us," or "our"), collects, uses, and protects your information when you use our website and services at nexpend.com ("Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and display name. If you sign in with Google, we receive your name and email from your Google account.

1.2 Subscription Data

You voluntarily enter information about your subscriptions, including names, amounts, currencies, billing periods, payment methods, dates, and notes. This data is stored to provide the Service to you.

1.3 Payment Information

If you subscribe to a paid plan, payment processing is handled by our third-party payment processor. We do not store your full credit card number or payment details on our servers.

1.4 Usage Data

We may collect basic usage data such as pages visited, features used, and timestamps to improve the Service.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process your transactions and manage your subscription plan
• Send transactional emails (account verification, password resets, billing receipts)
• Respond to your support inquiries
• Protect against fraud and abuse

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage & Security

Your data is stored securely using Supabase with row-level security (RLS) enabled, meaning only you can access your own subscription data. We use encryption in transit (TLS/SSL) and follow industry best practices to protect your information.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

4. Data Retention

We retain your account and subscription data for as long as your account is active. If you delete your account, we will delete your personal data and subscription data within 30 days, except where we are required to retain it for legal or compliance purposes.

5. Third-Party Services

We use the following third-party services to operate Nexpend:

• Supabase — Database and authentication
• Polar — Payment processing (for paid plans)
• Vercel — Hosting and deployment
• Resend — Transactional emails
• Microsoft Clarity — Analytics, heatmaps, and session replay

Each of these providers has their own privacy policies governing how they handle your data. We only share the minimum information necessary for these services to function.

6. Cookies

We use essential cookies required for the Service to function, such as session authentication cookies.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your subscription data (available via CSV/PDF export)
• Object to certain types of data processing

To exercise any of these rights, contact us at hello@nexpend.com.

8. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

9. International Data Transfers

Your data may be processed and stored in countries other than your own. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes constitutes acceptance.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at hello@nexpend.com.