Back

Privacy Policy

Last Updated: May 15, 2026

This Privacy Policy explains how Exxpense collects, uses, stores, processes, and protects your information when you access or use our platform. By using Exxpense, you consent to the practices described here.

1. About Exxpense

Exxpense is a personal finance management platform that helps users track expenses, manage budgets, monitor recurring spending, and organize financial data. Exxpense is not a bank, financial institution, investment advisor, tax advisor, or lending service.

2. Information We Collect

2.1 Account Information

When creating an account, we may collect your name, email address, authentication credentials, and Google OAuth account information. Passwords are never stored in plaintext.

2.2 Financial & Budgeting Information

Users voluntarily provide expense transactions, budget allocations, monthly income, savings goals, recurring expenses, financial notes, categories, and spending patterns. This information is used solely for providing Exxpense functionality.

2.3 Uploaded Files

Users may upload .xlsx or .xls files for transaction imports. Files are processed only for extracting transaction-related information. We reserve the right to reject unsupported or unsafe uploads.

2.4 Device & Technical Information

We may automatically collect browser type, device information, session information, push notification subscription identifiers, IP address information processed through hosting infrastructure logs, and diagnostic metadata.

2.5 Cookies & Local Storage

Exxpense uses cookies, local storage, and secure session tokens for authentication, session management, security, and user preferences. Financial data is not stored in browser local storage.

2.6 Referral Information

If you use or are invited through a referral link, we collect and store your referral code, an attribution record linking the referring and referred accounts, and related signup and verification details (such as activity signals used to confirm a genuine signup). This information is used solely to administer referral programs, calculate and grant rewards, and detect fraud or abuse.

3. How We Use Information

  • Provide platform functionality and authenticate users
  • Process subscriptions and import/export financial data
  • Generate analytics and budgeting insights
  • Send notifications and reminders
  • Administer referral and promotional programs and grant associated rewards
  • Detect abuse or security threats
  • Improve platform reliability and user experience
  • Comply with legal obligations

4. AI & Automated Insights

Certain future features may use AI technologies to generate spending insights, budgeting recommendations, savings suggestions, and financial summaries. AI-generated outputs may be inaccurate, may contain errors, and are informational only — they must not be treated as professional financial advice. Users remain solely responsible for financial decisions.

5. Authentication Providers

Users may authenticate using email/password or Google OAuth. When using Google login, we may receive your name, email address, and basic profile information. Exxpense does not access Gmail content, Google Drive files, contacts, calendar data, or other Google account data beyond basic authentication information.

6. Payment Processing

Subscription payments are processed through Razorpay. Exxpense does not store credit card numbers, UPI credentials, banking credentials, or full payment instrument details. Payment providers may independently collect and process payment-related information subject to their own privacy policies.

7. Third-Party Service Providers

We may share limited information with trusted service providers strictly for operating Exxpense, including Razorpay (payments), Vercel (hosting), Neon PostgreSQL (database), Resend (email delivery), and AI service providers for future AI functionality. Third-party providers process data according to their own policies.

8. Data Storage & International Processing

Your information may be processed or stored on infrastructure located outside India, including Singapore and the United States. By using Exxpense, you consent to such processing where necessary for service operation. We implement commercially reasonable safeguards to protect personal information.

9. Data Security

Exxpense implements password hashing, secure authentication tokens, encryption where applicable, restricted access controls, and infrastructure-level protections. Despite these measures, no platform is completely secure. Users are responsible for safeguarding account credentials.

10. Data Retention

We retain information only as long as reasonably necessary for providing the platform, legal compliance, security and fraud prevention, resolving disputes, and enforcing agreements. Certain infrastructure logs, payment records, or backup copies may persist temporarily after deletion requests.

11. Account Deletion

Users may request permanent account deletion from the Profile page. Upon deletion, platform account information and financial records may be removed and active sessions terminated. Certain limited records may be retained temporarily where legally required. Third-party payment processors may independently retain billing records per their legal obligations.

12. User Rights

Depending on applicable law, users may have the right to access personal data, correct inaccurate information, request deletion, withdraw consent where applicable, and export certain information. Requests may be subject to identity verification and technical limitations.

13. Marketing Communications

Exxpense may send transactional emails, subscription notifications, password reset emails, billing reminders, and product updates. Users may opt out of optional marketing communications. Essential service-related communications cannot be opted out of.

14. Push Notifications

Users may enable push notifications for budget alerts, recurring reminders, subscription notices, and product updates. Push notifications can be disabled through browser or device settings.

15. Children's Privacy

Exxpense is intended for individuals who are at least 18 years of age. We do not knowingly collect, store, or process personal information from individuals under the age of 18. If we become aware that personal data has been submitted by a person under 18, we will take reasonable steps to delete such information promptly.

16. Prohibited Content & Abuse Prevention

Users must not upload malware, harmful files, illegal content, non-financial unrelated files, or copyright-infringing content. We may suspend or terminate accounts involved in abusive or unlawful activity.

17. Future Features

Future functionality may include OCR receipt scanning, AI budgeting assistance, WhatsApp notifications, investment tracking tools, and mobile applications. This Privacy Policy may be updated as such features evolve.

18. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Updated versions become effective upon publication. Continued use of Exxpense after updates constitutes acceptance of the revised policy.

19. Contact

For privacy-related requests or questions: legal@exxpense.in

20. Consent

By accessing or using Exxpense, you acknowledge that you have read this Privacy Policy, understand it, and consent to the collection and use of information as described herein.

Also see our Terms of Service · Refund Policy · Cookie Policy