Privacy Policy

Welcome to SpendCraft!

This Privacy Policy explains how SpendCraft, Inc. (“SpendCraft”, “we”, “our”, or “us”) collects, uses, and protects your information when you visit spendcraft.com or use our products and services (the “Services”).

By using our website or Services, you agree to this Privacy Policy.

1. Who We Are

SpendCraft is a business-to-business (B2B) software platform that helps organizations classify, normalize, and analyze spend data using AI and automation.

We respect your privacy and handle your information with care, transparency, and security.

3. How We Use Your Information

We use your information to:

• Operate and maintain our platform
• Provide AI-powered classification and analytics
• Process payments and manage accounts
• Communicate product updates, security notices, or support information
• Improve features and performance
• Ensure compliance with legal and contractual obligations

We do not sell or trade your personal information.

4. Data Ownership

Any data you upload into SpendCraft remains your property.

We process Customer Data only to deliver and support the Services, never for marketing or product development unrelated to your use.

5. How We Share Information

We share your information only with:

• Service Providers: Trusted partners that help us operate our platform (e.g., cloud hosting, authentication, billing).
• Legal or Regulatory Authorities: When required to comply with applicable laws or valid legal processes.
• Business Transfers: If SpendCraft undergoes a merger, acquisition, or asset sale, provided data protections remain in place.

All service providers are contractually bound to maintain strict confidentiality and security standards.

6. Security and Data Protection

We use enterprise-grade security controls to protect your data, including:

• Encryption in transit and at rest
• Multi-factor authentication for administrative access
• Role-based permissions and continuous monitoring

SpendCraft is hosted on Microsoft Azure, which maintains compliance with SOC 2 Type II, ISO 27001, and other industry certifications.

While we take robust measures to safeguard your information, no system is completely immune to risk. We encourage users to maintain good security practices and report any suspicious activity to our team.

7. Data Retention

We retain data for as long as necessary to provide the Services, meet legal requirements, and maintain account records.

You may request deletion of your data by contacting privacy@spendcraft.com.

8. International Data Transfers

SpendCraft operates from the United States but may process data globally through secure cloud infrastructure.

When transferring data internationally, we apply recognized safeguards such as Standard Contractual Clauses (SCCs) to protect your information.

9. Your Rights

Depending on your region, you may have the right to:

• Access or request a copy of your information
• Correct or delete your data
• Restrict or object to processing
• Request data portability

To exercise these rights, email privacy@spendcraft.com. We will respond in accordance with applicable law.

10. Cookies

SpendCraft uses cookies to make our site work properly, enhance performance, and analyze usage.

You can control cookie settings through your browser, but some features may not function correctly if cookies are disabled.

11. Children's Privacy

SpendCraft is intended for professional use and not directed toward individuals under 18.

We do not knowingly collect personal information from minors.

12. Updates to This Policy

We may update this Privacy Policy periodically.

When we do, we will post the revised version here with an updated effective date.

If changes are significant, we will notify users via email or in-app notice.

13. Contact Us