Privacy Policy

#Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our Services, and information from third-party sources.

Personal Information You Provide

When you start and use the bot, you provide us with:

1. Account Information: your first name, phone number, and messenger username - linked automatically when you start the bot. There is no separate registration, email, or password.
2. Financial Information: the transactions, expense categories, and monthly budget you choose to track.
3. Payment Information: subscription payments are processed by Stripe. We never see or store your card details.
4. Communication Data: the text, voice messages, and receipt photos you send to the bot to record expenses.
5. Voice Data: Voice messages sent via Telegram/WhatsApp are transcribed using OpenRouter (Google Gemini) and immediately discarded after processing. We do not store audio files.

Information Collected Automatically

When you access or use our Services, we automatically collect:

1. Platform Information: your messenger (Telegram or WhatsApp), user ID, and username.
2. Website Log Information: Access times, pages viewed, and IP address when visiting our website
3. Usage Information: which features you use and how you interact with the bot, such as monthly counts of voice notes, receipt scans, and AI requests.
4. Location Information: General location based on IP address (we do not collect precise GPS location)

#How We Use Your Information

We use the information we collect to provide, maintain, and improve our Services, including:

1. Process and track your expenses and financial transactions
2. Provide personalized insights and recommendations based on your spending patterns
3. Send you technical notices, updates, security alerts, and support messages
4. Respond to your comments, questions, and customer service requests
5. Develop new features, products, and services
6. Monitor and analyze trends, usage, and activities in connection with our Services
7. Detect, investigate, and prevent fraudulent transactions and other illegal activities
8. Personalize and improve your experience

#Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers

We share information with vendors, consultants, and other service providers who need access to such information to carry out work on our behalf.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

#Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect your personal information, including:

1. Encryption: your data is encrypted in transit with modern TLS and encrypted at rest in our database.
2. Access Controls: Strict access controls and authentication mechanisms for our systems
3. Regular Reviews: we periodically review our code and infrastructure for security issues.
4. Employee Training: Regular privacy and security training for all employees who handle personal data
5. Incident Response: Comprehensive incident response procedures to address potential data breaches

#Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

You can export all your data at any time using the /export command in the bot. Data is provided in CSV format.

Correction

You can update your language, currency, and other preferences at any time using bot commands (/lang, /currency).

Deletion

You can permanently delete your account and all associated data at any time by sending /delete to the bot. Deletion is immediate and irreversible. Expense data is also automatically deleted after 13 months.

Opt-Out

You can stop using the bot at any time by simply not sending messages. To remove all data, use the /delete command.

Data Processing Restriction

You may request that we restrict the processing of your personal data in certain circumstances.

#Cookies and Tracking

We use cookies and similar tracking technologies to collect and track information about your use of our Services. You can control cookies through your browser settings and other tools.

Types of Cookies We Use

1. Essential Cookies: Required for the operation of our Services (e.g., session management, security)
2. Analytics Cookies: Help us understand how visitors interact with our Services
3. Preference Cookies: Remember your settings and preferences

We do not use advertising or tracking cookies. We respect Do Not Track (DNT) browser signals.

#Children's Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

If you believe that a child under 13 has provided us with personal information, please contact us immediately.

#Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

1. Posting the updated policy on our website with a new "Last Updated" date
2. Sending a notification through the bot (for significant changes)
3. Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about our data practices.

#Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

hello@budget.digital