Privacy & GDPR Compliance
Your Privacy Matters
XpenseLab is committed to protecting your personal data and ensuring full compliance with GDPR.
This page provides an overview of how we handle your data, your rights under GDPR, and our data protection measures. For complete details, please refer to our full GDPR Compliance Documentation.
What Data We Collect
Personal Information
- Email address and display name
- Authentication information (OAuth providers)
- User preferences and settings
Financial Data
- Income and expense records
- Budget information
- Transaction history
Technical Data
- Performance metrics (Core Web Vitals)
- Error logs (sanitized, no personal data)
- Usage statistics
How We Use Your Data
We use your data to:
- Provide core financial tracking services
- Automatically categorize expenses using AI
- Generate insights and forecasts
- Import transactions from the CSV or Excel files you upload
- Improve application performance and reliability
- Ensure security and prevent fraud
Legal Basis for Processing
We process your data based on:
- Contractual Necessity: To provide our financial tracking services
- Consent: For optional features like analytics
- Legitimate Interests: For security, fraud prevention, and service improvement
- Legal Obligation: To comply with applicable laws and regulations
Contact & Support
Data Protection Officer
For questions about data protection or to exercise your rights:
tushar@xpenselab.comSupervisory Authority
If you believe we have not addressed your concerns, you can file a complaint with your local Data Protection Authority: