Privacy Policy

1. Introduction

This Privacy Policy describes how 9548-3293 Québec inc. ("we", "us", "our"), operating TextPense, collects, uses, and protects your personal information when you use our expense tracking service at textpense.app (the "Service").

By using the Service, you consent to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and password (stored securely using industry-standard hashing).

2.2 Phone Number

You provide your phone number to enable SMS-based expense tracking. We use this to associate incoming text messages with your account.

2.3 SMS Content

When you text an expense to our phone number, the content of your SMS message is processed to extract expense information (amount, merchant, category). The raw SMS text is stored temporarily for processing and cost tracking purposes.

2.4 Expense Data

We store the expense records you create, including amounts, merchants, categories, dates, and any notes you add.

2.5 Payment Information

Subscription payments are processed by Stripe. We do not store your credit card numbers or banking details on our servers. Stripe collects and processes your payment information in accordance with their own Privacy Policy.

2.6 Usage Data

We collect basic usage logs such as SMS processing events and AI parsing costs for operational and billing purposes.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To process your SMS messages and create expense records using AI-powered parsing
• To manage your account and subscriptions
• To send service-related communications
• To monitor and prevent abuse of the Service
• To comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate TextPense:

4.1 Telnyx

Telnyx provides our SMS infrastructure. When you text an expense, your phone number and message content pass through Telnyx's systems. See Telnyx Privacy Policy.

4.2 AI Processing (OpenRouter)

Your SMS text is sent to AI language models via OpenRouter to parse expense details (amount, merchant, category). The AI provider processes this text to extract structured data and does not retain it for training purposes. See OpenRouter Privacy Policy.

4.3 Stripe

Stripe handles all payment processing. We do not have access to your full payment card details. See Stripe Privacy Policy.

5. Data Retention

We retain your account information and expense data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

SMS log data used for processing and cost tracking is retained for up to 90 days, after which it may be anonymized or deleted.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encrypted connections (HTTPS/TLS), secure password hashing, and access-controlled infrastructure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Export: Request your data in a portable format
• Objection: Object to certain processing of your data

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies and Local Storage

TextPense uses essential cookies to maintain your authentication session. We do not use third-party tracking cookies or analytics services. No advertising cookies are used.

9. Canadian Privacy Law (PIPEDA)

As a Québec-based company, we comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Québec's Act respecting the protection of personal information in the private sector (Law 25). You have the right to access, correct, and request deletion of your personal information.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell your personal information.

11. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

9548-3293 Québec inc.
Email: [email protected]