Privacy Policy

This policy describes what SpendingPath, operated by DGOURD LLC ("we," "us"), collects when you use the free estimate or the paid scenario tool, why, and who else sees it.

The streamlined model collects almost nothing

The streamlined model on the home page runs entirely in your browser. The numbers you type are never sent to us, and using it does not require an account. Our hosting provider still receives standard server logs, including your IP address, when the page loads, as described under "Who we share it with."

What the paid tier collects

• Your email address and password. The password is stored by our authentication provider only as a hash; we never see it in plain text.
• The scenarios you build and save: the financial parameters you enter and the results the model computes from them.
• Your name, billing address, subscription, and billing status (active, canceled, and similar), and the last four digits of your card, which we receive from Stripe. We never receive or store your full card number.
• A sign-in log kept by our authentication provider (timestamp, action, and IP address).
• Standard server logs from our hosting providers, including your IP address and the pages you load.
• Anything you send us in a support request.

How we use it

To run and save your scenarios, to bill your subscription, to respond to support requests, to keep the Service secure, and to investigate and defend against fraud and disputed payments (the sign-in log is our evidence that a disputed payment came from an account that was actually used). We may email you about your account, your billing, and material changes to the Service or these policies. We do not send marketing email unless you ask for it, and you can unsubscribe from marketing email at any time. We do not use your financial information for advertising, we do not build a profile of you for any purpose beyond operating the Service, and we do not sell or share your personal information.

Who we share it with

We do not sell or rent your personal information. The services below process data on our behalf to run the Service:

We may also disclose information if the law requires it, to protect our rights or the safety of others, or to a successor if the business is sold or reorganized. Any successor will be bound by this policy for the data it receives.

How long we keep it

Saved scenarios and their results are kept until you delete the scenario yourself, or until your account is closed. To close your account, email us at the address below. We will delete your account data within 30 days, except for billing records we must keep for tax and accounting purposes and any records needed to resolve an open payment dispute. The sign-in log is kept for up to 12 months. Operational records of individual requests to the calculation service, which we use for capacity planning and which contain no financial values, are deleted within 180 days.

Security

We use reasonable technical and organizational safeguards to protect your data, including encryption in transit, hashed passwords, and database access rules that limit each account to its own data. No system is perfectly secure, and we cannot guarantee that your data will never be accessed without authorization. If a breach affects your personal information, we will notify you as the law requires.

Cookies

We use one cookie, set by our authentication provider, to keep you signed in. We do not use advertising or analytics cookies, and we do not track you across other websites.

Your rights (California: CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we hold about you, to request its deletion, to request correction of inaccurate information, and to opt out of its sale or sharing. We do not sell or share your personal information. To exercise any of these rights, contact us at the address below. We will verify your request by confirming it comes from the email address on your account, and we will not treat you differently for exercising these rights. You may authorize an agent to make a request for you.

Your rights (EU/UK: GDPR)

The paid tier is offered to United States residents, and we accept payment only from a United States billing address. If you are located in the European Union or United Kingdom and use the Service anyway, we process your account and billing information to perform our contract with you, and your sign-in and server logs under our legitimate interest in keeping the Service secure and preventing payment fraud. Our subprocessors above may process data outside the EU/UK as part of operating their services; where they do, they rely on the European Commission's Standard Contractual Clauses and the UK Addendum to them. You have the right to access, correct, delete, restrict, or port your data, to object to processing based on legitimate interest, and to lodge a complaint with your local data protection authority; contact us at the address below to exercise any of these.

Children

The Service is for adults. The Service is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The date at the top of this page is when it was last changed. If a change materially affects how we use your data, we will email you before it takes effect.

Contact

Questions or rights requests: [email protected], or by mail at 1410 Adams St, #148, Nashville, TN 37208.