Privacy
Last updated October 31, 2026. What Finspect keeps, who it shares it with, and how to delete it.
What we keep
- Your account: your email address and, if you set one, a password (stored only as a one-way hash by our sign-in provider). Your name and business name if you add them.
- What we read from your bills: vendor, dates, totals, meter readings and each charge line, plus the problems we find and how you marked them.
- The original file of each bill, unless you turn that off in Settings → Your data.
Card, bank and full account numbers are cut to their last 4 digits before anything is saved. We don't sell your data or use it for advertising.
Who handles it for us
- Anthropic reads each bill with its Claude AI model. Anthropic doesn't use data sent through its API to train its models.
- Supabase stores your account, saved checks and original files (United States).
- Vercel runs the website and counts page visits (which pages are opened, with no cookies and nothing that identifies you).
- Stripe takes payments. Your card details go to Stripe, never to us.
- Our email provider sends sign-in codes.
Who can see your bills
Only you, after signing in. The database itself refuses other accounts, and if you turn on 2-step verification it also refuses your own session until you've entered the code. Original files open through links that expire after one minute.
How long we keep it
Until you delete it. You can delete one check, all your bills (Settings → Your data), or your whole account (Settings → Delete account). Deleting is immediate and can't be undone.
Cookies
Only the ones needed to keep you signed in and to sign you out after the period you choose. No tracking or advertising cookies. Page visits are counted without cookies.
Questions
Reply to any sign-in email from Finspect and we'll answer. See also our terms.