SpendSlicer
Legal

Privacy Policy

Last updated: April 14, 2026

The short version

SpendSlicer collects the minimum data needed to show you your SaaS and AI spend. We don't sell it. We don't train models on it. We use it to run your account and, on an opt-in basis, to produce the anonymized peer benchmarks you see in the product.

What we collect

  • Account data. Your email, your organization name, and the sign-in identity you authenticate with.
  • Connector data. When you authorize a connector (Okta, QuickBooks, OpenAI, etc.), we pull the usage and spend data those providers expose through their read-only APIs. Specific scopes are listed on each connector before you authorize.
  • Product telemetry. Page views, feature usage, and errors, tied to your account. Used to fix bugs and prioritize features.

What we don't collect

  • The contents of your AI prompts or completions. We read token counts, models, and timestamps — never the payload.
  • Customer PII from third-party tools we integrate with, unless it's required to identify the user behind a SaaS login (email, name).
  • Passwords or raw secrets. OAuth tokens are stored encrypted and scoped to the minimum read permissions we need.

How we use it

  • To operate your SpendSlicer tenant and surface savings.
  • To produce anonymized, aggregated peer benchmarks — only if you opt in. No row-level data leaves your tenant.
  • To contact you about your account, product changes, and security issues.

Sub-processors

We use a short list of sub-processors for hosting, email, error tracking, and payments. See the full, versioned list at /sub-processors/.

Your rights

You can access, export, correct, and delete your data at any time — from inside the app, or by emailing privacy@spendslicer.com. GDPR and CCPA requests are handled on the same channel.

Data retention

Your tenant data is retained for the life of your subscription plus 30 days. On cancellation, we delete it. Backup tapes are purged on a rolling 30-day cycle.

Changes

We'll notify you by email and post a changelog entry at least 30 days before any material change. The effective date will be updated at the top of this page.

Contact

Questions? Email privacy@spendslicer.com.