Privacy Policy

1. Overview

Bright Worldwide, LLC ("we," "us," or "our") operates Spendy. This Privacy Policy explains how we collect, use, and protect information about you when you use the Service. We are committed to handling your data responsibly and transparently.

2. Information We Collect

Information you provide

• Email address — used for passwordless authentication via magic link
• Transaction data — CSV files you upload containing your financial transaction history
• Account settings — timezone, account name, member preferences

Information collected automatically

• Standard server logs (IP address, browser type, pages visited, timestamps)
• Session data stored in a secure, server-side session cookie

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and secure your account
• Process and display your imported transaction data
• Respond to your support requests
• Detect and prevent fraud or abuse

4. Financial Data

Spendy does not connect to your bank or financial institution directly. You provide transaction data by uploading CSV files you have exported yourself. We store this data on your behalf to power the Service. We do not sell, share, or use your financial data for advertising or analytics beyond operating the Service for you.

5. Data Sharing

We do not sell your personal information. We may share information only in the following limited circumstances:

• Service providers — infrastructure and hosting providers who process data on our behalf under confidentiality obligations
• Legal requirements — if required by law, court order, or to protect the rights and safety of users or the public
• Business transfers — in connection with a merger, acquisition, or sale of all or part of our assets

6. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by emailing [email protected] We will delete your data within 30 days of a verified deletion request.

7. Security

We implement industry-standard security measures including HTTPS encryption, secure session management, and access controls. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Cookies

We use a single, essential session cookie to keep you signed in. We do not use advertising cookies or third-party tracking cookies.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will promptly delete it.

10. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your data
• Export your data

To exercise any of these rights, contact us at [email protected]

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the new policy and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance.

12. Contact

Questions or concerns about this Privacy Policy? Reach us at: