Privacy policy
Last updated: 1 November 2026
Xpensio turns invoice emails you choose to forward into a personal spending view. This page explains what information we collect, how we use it and how it is processed.
What we collect
- Account information: Details needed to create and access your account, such as your email address. If you sign in with Google, we receive your name and email address from Google.
- Forwarded invoices: The content of invoice emails you forward to invoices@xpensio.app and expense details extracted from them, such as the merchant, amount, currency, date and category. Emails that are not invoices from supported brands are not added to your dashboard.
- Invoice attachments: If a forwarded email includes a PDF or image invoice, we store one copy so you can view it from your dashboard.
- Support messages: Information you provide when you contact us for help or share feedback.
How we use your information
We use this information to extract and organise expense details, display your spending dashboard, maintain your account, keep the service secure and respond to your messages.
AI-assisted invoice processing
Xpensio uses OpenAI, a third-party AI provider, to read invoice emails you forward and extract expense details.
Before sending the email body to OpenAI, we remove links and HTML formatting. Invoice attachments are not sent to OpenAI.
We do not enable sharing of this data with OpenAI for model training.
Service providers
We use third-party service providers for email handling, authentication, hosting, data storage and AI processing. Operating Xpensio involves sharing information with the providers responsible for these functions.
What we do not do
- We do not connect to or read your bank account.
- We do not access your inbox. We process only emails you choose to forward.
- We do not sell your personal information.
- We do not use advertising or analytics trackers. We use essential cookies or browser storage only to keep you signed in.
How long information is kept
We keep your account and invoice information while your account is open so that we can provide your spending dashboard.
OpenAI may retain submitted content and results in abuse-monitoring logs for up to 30 days, or longer where required by law or necessary to prevent harm. Further information is available in OpenAI’s API data policy.
Your choices and deletion requests
You choose which emails to forward and can stop forwarding at any time. Automatic forwarding is set up by you in your email settings and can be removed there whenever you like.
You can ask to access, correct or delete your information by emailing support@xpensio.app. We delete your Xpensio account and its stored invoice data within 30 days of a deletion request. Information held by service providers remains subject to their applicable retention policies and legal obligations.
Changes to this policy
We may update this policy as Xpensio develops. The date above indicates when it was last updated.
Contact
For privacy questions, deletion requests or grievances about how your information is handled, contact support@xpensio.app.