Privacy Policy

Last updated: April 1, 2026

1. Introduction

SpendFort, Inc. ("SpendFort," "we," "us," or "our") operates the SpendFort platform at spendfort.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and organization details. If you sign in via Google OAuth, we receive your Google profile information as authorized by you.

Ad Platform Data: When you connect your Google Ads or Meta Ads accounts, we access campaign data, landing page URLs, budget information, and spend data solely for the purpose of monitoring your landing pages and providing alerts. We do not store raw ad performance data beyond what is needed for monitoring.

Payment Information: Payments are processed by Stripe, Inc. We do not store credit card numbers, CVVs, or full card details on our servers. Stripe handles all payment data in compliance with PCI DSS Level 1.

Usage Data: We collect information about how you interact with SpendFort, including pages visited, features used, and actions taken. This data is processed by PostHog and is used to improve the product.

Monitoring Data: We collect HTTP response codes, SSL certificate status, page load times, and redirect chains for URLs you add to monitoring.

3. How We Use Your Information

We use your information to: operate and maintain the SpendFort platform; monitor your landing pages and send alerts when issues are detected; auto-pause ad campaigns when landing pages fail (if enabled); provide budget pacing alerts; process payments and manage subscriptions; send transactional emails (alerts, reports, account notifications); improve our product and develop new features; and comply with legal obligations.

4. Third-Party Services

We share data with the following categories of service providers, each bound by data processing agreements:

Infrastructure: Vercel (hosting), Railway (database, workers, Redis)

Payments: Stripe, Inc. (payment processing)

Communications: Postmark (transactional email), Twilio (SMS alerts)

Analytics: PostHog (product analytics)

Error Tracking: Sentry (application error monitoring)

Ad Platforms: Google Ads API, Meta Marketing API (accessed with your explicit authorization to monitor your campaigns)

5. Data Retention

We retain your account data for as long as your account is active. Monitoring data (URL check results, incident logs) is retained for 90 days by default, or longer if your plan includes extended history. When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

6. Your Rights

For all users: You may access, update, or delete your personal information at any time through your account settings or by contacting us at [email protected].

For EU/EEA residents (GDPR): You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. To exercise these rights, contact [email protected]. We will respond within 30 days.

For California residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell your personal information. To exercise your rights, contact [email protected].

7. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (PostHog) to understand product usage — these are only set with your consent for EU/UK visitors. You can manage cookie preferences through the cookie banner or your browser settings.

8. Security

We implement industry-standard security measures including: encryption in transit (TLS 1.3) and at rest (AES-256); role-based access controls; regular security audits; automated vulnerability scanning; and secure credential storage. For details, see our Security page.

9. International Data Transfers

SpendFort processes data in the United States. If you are located in the EU/EEA, we transfer data using Standard Contractual Clauses approved by the European Commission. A copy of our Data Processing Agreement is available upon request.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification at least 30 days before the changes take effect.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

SpendFort, Inc.
Email: [email protected]
Website: https://spendfort.com