Your privacy matters to us. This Privacy Policy explains what information we collect when you use your Space (the "Service"), why we collect it, how we use and protect it, who we share it with, and the rights you have. It forms part of our Terms of Service.
In short: we collect only what we need to run the Service. Your uploaded statements are parsed on our server and the original file is not kept. We don't sell your data, we don't use advertising or tracking cookies, and we never see your payment card details, which are handled by Paddle.
1. Who is responsible for your information
The Service is operated by Orel Ashush, a sole proprietor (עוסק) in Israel, who is the owner of the database and the controller of your personal information for the purposes of the Israeli Privacy Protection Law, 5741-1981, and, where applicable, the EU/UK General Data Protection Regulation ("GDPR"). Contact: orel.asc11@gmail.com.
2. Information we collect
2.1. Account information (from Google)
When you sign in with Google, we receive and store your name, email address, profile picture URL and Google account identifier. We never receive your Google password.
2.2. Content you upload
When you upload a credit-card statement file, our server reads it to extract, for each transaction, the business name, the amount, the transaction date, and the category shown in the file (if any). We store those details together with the file name, a fingerprint (cryptographic hash) of the file used only to detect a file uploaded twice, the number of rows and sheets, and the categories, names, merges and choices you make in the Service. We also store the notes you add to transactions, the transactions you enter by hand (date, business or description, amount, category and an optional note), and the monthly budgets you set for categories. The original file is processed in memory and is not stored after it is parsed. Please do not upload files containing full card numbers, identification numbers or other sensitive data the Service does not need.
2.3. Subscription and billing information
If you subscribe to Pro, the payment is processed by Paddle. We receive from Paddle, and store, your Paddle customer and subscription identifiers, plan, billing interval, subscription status, renewal and cancellation dates. We do not receive or store your card number, CVV or bank details.
2.4. Terms acceptance records
When you accept our Terms of Service and Privacy Policy, we record the version accepted, the date and time, your IP address and your browser's user-agent string, to evidence your consent.
2.5. Technical information
Like most websites, our hosting infrastructure automatically processes technical data such as IP address, browser type, device information, pages requested, and date and time of requests, in server logs, for security and operation. We also store your language preference.
2.6. Two-step verification data
To protect your financial information, using the Expense Journal requires a code from an authenticator app. We store the secret key shared with your authenticator app in encrypted form, your one-time backup codes only as irreversible hashes, and for each device you ask us to remember: a hashed device token, the browser's user-agent string, and the date it expires (30 days). We also record failed code attempts to temporarily lock the account after repeated failures. The authenticator app itself runs on your phone; we don't receive any information from it.
2.7. The installed app and notifications
If you install the Service as an app on your device, the app keeps copies of the Service's static files (design, scripts, fonts and icons) in your browser's storage so it opens quickly. It never stores your financial data on the device. If you turn on notifications on a device, we store for that device: the address your browser's push service gave it, the keys used to encrypt notifications to it, the browser's user-agent string, and when we last sent it a notification. Notifications are encrypted so that only your device can read them, and are delivered through your browser's push service (Google for Chrome and Android, Apple for Safari on iPhone and iPad, Mozilla for Firefox, Microsoft for Edge on Windows). Notifications may appear on your lock screen, so we keep their text general.
2.8. Communications
If you email us, we keep the correspondence and your contact details to respond and keep a record of it.
3. How we use your information
- To provide the Service: creating and managing your Account, parsing your files, categorizing and summarizing transactions, remembering your categorization choices, and producing exports;
- To manage Subscriptions: granting and removing access to Pro features according to your subscription status;
- To keep the Service secure: authentication including two-step verification, preventing fraud and abuse, and investigating incidents;
- To communicate with you about the Service, your Account, your Subscription, and changes to our terms or policies;
- To send the notifications you turn on, to the devices you turned them on for;
- To maintain and improve the Service, including fixing errors and understanding, in aggregate, how features are used;
- To comply with legal obligations, enforce our Terms, and establish, exercise or defend legal claims.
We do not use your uploaded financial data for advertising, and we do not make decisions producing legal effects about you based solely on automated processing.
4. Legal bases (where GDPR applies)
We process personal data on the following bases: performance of our contract with you (providing the Service and Subscription); our legitimate interests (security, fraud prevention, improving the Service, keeping records of consent), which we balance against your rights; compliance with legal obligations; and your consent, where we ask for it. Under Israeli law, you provide information voluntarily and are not legally required to do so, but without it we cannot provide the Service.
5. Who we share information with
We do not sell or rent your personal information, and we do not share it with advertisers. We share information only as follows:
| Recipient | Purpose |
|---|---|
| Google LLC: Google Cloud Run (servers in Belgium, European Union), Secret Manager and Cloud Logging; Google Identity Services | Hosting and running the Service, securing secrets, sign-in |
| Neon, Inc. (managed PostgreSQL), hosted on Amazon Web Services in Frankfurt, Germany (AWS acts as Neon's sub-processor) | Storing Account and Service data in our database |
| Your browser's push service (Google, Apple, Mozilla or Microsoft, depending on the browser) | Delivering the notifications you turn on; it receives them encrypted and cannot read them |
| Paddle.com Market Limited | Merchant of Record: checkout, payment processing, invoices, taxes, subscription management. Paddle processes your payment data under its own privacy notice. |
| Professional advisers | Lawyers, accountants and auditors, under a duty of confidentiality, where needed |
| Authorities | Where required by law, court order or a competent authority, or to protect rights, safety and property |
| A successor | If the Service or business is sold, merged or transferred, subject to this Policy |
Our service providers may process information only on our instructions and for the purposes above.
6. International transfers
Our providers store and process information outside Israel: the application runs on Google Cloud servers in Belgium, and the database is stored on Amazon Web Services servers in Germany (Frankfurt), both in the European Union, which Israel recognizes as providing adequate protection. Some of Google's supporting services (sign-in, secret storage and server logs) may also process information in other countries, including the United States. Our processors' data processing agreements govern how they handle the information on our behalf. When information is transferred abroad, we rely on the safeguards permitted by the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001 and, where GDPR applies, appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.
7. How long we keep information
- Account and Service data: for as long as your Account is active. You can clear your expense data at any time using the tool's reset option, and you can delete your entire Account yourself at any time in Settings → Delete account. Deletion is immediate: your expense data (including notes, transactions entered by hand and budgets), categories, uploaded-file records, two-step verification data, notification subscriptions and profile details (name, email, picture) are erased. You can also ask us by email, and we will do it within 30 days.
- Backups: deleted data may remain in our providers' encrypted backups for a limited period until they are overwritten in the ordinary course.
- Terms acceptance and subscription records (kept even after you delete your Account, detached from your name and email): kept for as long as needed to evidence consent and transactions and to establish or defend legal claims, generally up to seven (7) years after your Account is closed, consistent with the Israeli limitation period.
- Notification subscriptions: until you turn notifications off on that device, sign out on it, the push service reports it is no longer valid, or you delete your Account.
- Server logs: kept by our hosting provider for a limited period according to its retention settings.
8. How we protect information
We use reasonable technical and organizational measures appropriate to the nature of the information, including: encrypted connections (HTTPS) with HSTS; session cookies that are signed, HttpOnly and Secure; strict per-user separation of data in the database; storing secrets in a managed secret store rather than in code; data processing agreements with our processors; two-step verification with an authenticator app, required for the Expense Journal, with encrypted keys, hashed backup codes and temporary lockout after repeated wrong codes; a restrictive Content Security Policy; limiting file types and sizes on upload; and parsing files on the server without retaining the original. Access to production systems is restricted to the Operator. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security incident affects your personal data, we will act as required by the Israeli Privacy Protection (Data Security) Regulations, 5777-2017 and any other applicable law, including notifying you and the authorities where required.
9. Your rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you (Section 13 of the Privacy Protection Law);
- Correct or delete information that is inaccurate, incomplete, unclear or outdated (Section 14 of the Privacy Protection Law);
- Delete your Account and its data, which you can do yourself at any time in Settings;
- Where GDPR applies, also to restrict or object to certain processing, to data portability, to withdraw consent at any time (without affecting prior processing), and to complain to a supervisory authority;
- To complain to the Israeli Privacy Protection Authority.
To exercise your other rights, or if you prefer not to delete your Account yourself, email orel.asc11@gmail.com from the email address associated with your Account. We may need to verify your identity. We will respond within the time required by law (generally within 30 days).
10. Cookies and similar technologies
We use only cookies that are strictly necessary for the Service to work:
| Cookie | Purpose | Duration |
|---|---|---|
space_session | Keeps you signed in (signed, HttpOnly) | Up to 30 days |
lang | Remembers your language choice when signed out | Up to 1 year |
space_mfa_trust | Remembers a device you chose to trust for two-step verification (HttpOnly; set only if you tick "remember this device") | 30 days |
When you use Google Sign-In, or open the Paddle checkout, Google and Paddle may set their own cookies on their own domains, under their own policies, for security, fraud prevention and to complete the process. We do not use analytics, advertising or cross-site tracking cookies. We also store small preferences in your browser where needed for the Service to work, and, if you install the app, copies of the Service's static files (never your data).
11. Children
The Service is intended for adults aged 18 and over. We do not knowingly collect information from minors. If you believe a minor has provided us with information, contact us and we will delete it.
12. Links to other sites
The Service may link to third-party sites and services (for example, Google or Paddle). We are not responsible for their privacy practices; please review their policies.
13. Changes to this Policy
We may update this Policy from time to time. The "last updated" date and version at the top show when it last changed. If we make material changes, we will notify you in the Service or by email and, where required, ask for your consent again.
14. Contact
For any question or request about privacy, contact Orel Ashush at orel.asc11@gmail.com.