Privacy Policy
Last updated: July 24, 2026
SpendBeaver ("we," "us"), operated by CircleRoll LLC, provides a personal and business budgeting and expense-management application. This policy describes how we collect, use, and protect your information.
CircleRoll LLC
8735 Dunwoody Place, Ste N
Dunwoody, GA 30350
United States
Information we collect
Account information (name, email, phone). Financial account data you choose to connect — transactions, balances, and account and identity details — retrieved through our data provider Plaid. Expenses, receipts, budgets, savings goals, and information you enter manually. Usage analytics when enabled.
How we connect to your bank (Plaid)
When you link a financial account, we use Plaid Inc. to securely access your account information on your behalf. You authorize this connection before it begins, and Plaid's handling of your data is governed by Plaid's privacy policy (plaid.com/legal). We access this data only to provide budgeting, expense tracking, categorization, savings, and related features. You can disconnect a linked account at any time, which stops further data access.
How we use your information
To provide expense tracking, budgeting, savings, subscription detection, tax organization, reporting, and support. We use financial data only to deliver these features. We do not sell your data, and we do not share it with third parties for their own marketing.
SMS / text messaging
If you opt in to SpendBeaver SMS (for example by choosing "text me" in Settings → Notifications, or by texting START to our toll-free number), we use your mobile number to send and receive messages about receipt capture, expense nudges, and account notifications related to your SpendBeaver workspace. Message frequency varies. Message and data rates may apply. We process SMS through our messaging provider (Twilio). Reply STOP to opt out or HELP for help. Program details: spendbeaver.com/sms.
Third parties
Supabase (hosting, auth, database), Vercel (web hosting), Railway (processing), Plaid (financial account connectivity), Stripe (payments), Twilio (SMS/MMS), and analytics providers. Each maintains its own privacy policy. We share only what is necessary for these services to function.
How we protect your information
Data encrypted in transit (TLS 1.2+) and at rest. Production access restricted via role-based access controls and multi-factor authentication.
Data retention and your rights
Export your data (including transactions and receipts) anytime, free of charge. Delete your account and associated data from within the app; on deletion we remove your data from production systems within 30 days, except where limited retention is required by law. If your subscription lapses, your data remains viewable and exportable and is not deleted for non-payment.
See also our Data Retention & Deletion Policy.
Consumer consent
We collect, process, and store your data only after you consent, and only to provide the features you use.
