Privacy Policy

Last updated: January 30, 2026

SPEND.md ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you provide directly to us, including:

  • Name and email address
  • Account credentials
  • Payment and billing information
  • Business information (company name, role)
  • Communications you send to us

1.2 Financial Information

As a payment platform for AI agents, we process financial data including:

  • Virtual card details and transaction history
  • Spending patterns and limits
  • Bank account information for transfers
  • Identity verification documents (for compliance)

1.3 Automatically Collected Information

When you use our service, we automatically collect:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent)
  • Log data and analytics
  • Cookies and similar tracking technologies

2. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve our services
  • Process transactions and manage virtual cards
  • Send you service-related communications
  • Detect and prevent fraud and unauthorized access
  • Comply with legal and regulatory requirements
  • Respond to your inquiries and provide customer support
  • Send marketing communications (with your consent)

3. Information Sharing

We may share your information with:

  • Payment processors and financial partners: To facilitate card issuance, transactions, and compliance
  • Service providers: Third parties who perform services on our behalf (hosting, analytics, customer support)
  • Legal authorities: When required by law or to protect our rights and safety
  • Business transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

4. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit and at rest (TLS 1.3, AES-256)
  • Regular security audits and penetration testing
  • Access controls and authentication requirements
  • PCI DSS compliance for payment card data
  • SOC 2 Type II certification (in progress)

5. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Financial records are retained as required by applicable laws (typically 7 years). You may request deletion of your account and associated data, subject to legal retention requirements.

6. Your Rights

Depending on your location, you may have the right to:

  • Access and receive a copy of your personal data
  • Correct inaccurate or incomplete information
  • Request deletion of your personal data
  • Object to or restrict processing of your data
  • Data portability
  • Withdraw consent at any time

To exercise these rights, please contact us at privacy@spend.md.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where applicable.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver relevant content. You can manage cookie preferences through your browser settings. Essential cookies required for service functionality cannot be disabled.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our service. Continued use of our service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: privacy@spend.md
  • Website: https://spend.md/contact

This Privacy Policy is provided for informational purposes. SPEND.md is currently in development and not yet accepting users.