Privacy Policy

Effective September 15, 2026

SpendLedger is operated by Banana Analytics. This policy explains how we handle information when you browse SpendLedger.org, create an account, request alerts, or purchase a service. For privacy questions or requests, email info@spendledger.org.

Information we collect and why

• Accounts and sign-in. We use your email address, account identifiers, and authentication information to create and secure your account and connect it to your saved research. Clerk provides account authentication.
• Google sign-in. If you choose Google sign-in, Google shares basic identity information with Clerk, such as your Google account identifier, email address, name, and profile picture, according to the permissions you approve. SpendLedger uses the verified email address and Clerk user identifier to link your account. This sign-in feature does not request access to Gmail messages, Google Drive files, or your contacts. We do not use Google account data for advertising or sell it.
• Research and requests. We store the agencies and vendors you follow, saved account lists, saved-search filters and match history, review notes, preferences, and information you submit in service requests. We use these to provide your requested research tools, alerts, and assisted services.
• Payments. Stripe processes subscription payments. We store Stripe customer and subscription identifiers, billing status, and payment event records to manage service access and billing history. Payment card details entered in Stripe Checkout are processed by Stripe; our application does not collect or store full card numbers.
• Technical information. Our hosting, security, and analytics services process information such as IP addresses, browser and device details, page requests, timestamps, and errors to operate, measure, and protect the service.

Cookies, analytics, and advertising

Authentication uses cookies or similar storage to keep you signed in. We use PostHog for pageviews, commercial link clicks, pilot form attempts, and session replay to understand usability. Its analytics identifier is stored in browser session storage for the visit. Replay is configured to mask form inputs, and our custom analytics events do not include form answers or email addresses.

We also use the Google Ads tag to measure visits and advertising performance. It sends advertising measurement information to Google and may use cookies. We do not add your email address or research-brief answers to that tag. Campaign labels and ad click identifiers can be held in session storage and saved with a pilot request you submit. We report relevant request outcomes to the ad platform using click identifiers and clear stored click identifiers after 13 months.

You can manage cookies and site storage through your browser settings. Blocking authentication storage may prevent sign-in. Google advertising preferences are available through My Ad Center.

Email choices

We send sign-in messages, requested payment-summary alerts, service-request replies, and account or billing communications. Marketing messages require a separate subscription. You can change marketing preferences in your account or use the unsubscribe link in a marketing email. Alert emails have their own unsubscribe controls. Unsubscribing from emails does not cancel a paid service.

Who processes information

We use service providers to operate SpendLedger, including Clerk for authentication, Stripe for payments, Resend for email, Vercel for hosting, Neon for database storage, Cloudflare for domain and network services, PostHog for analytics, and Google for sign-in and advertising measurement. They process information needed for their roles under their applicable terms and privacy policies. Processing may occur outside your state or country.

We may also disclose information when required by law, to protect people or the service, or in connection with a business transfer subject to applicable privacy obligations. Private account information is not published as part of the public spending database.

Retention and your choices

We retain account and research information as needed to provide the service. Billing, consent, security, and audit records may be retained to meet accounting or legal requirements, resolve disputes, and prevent abuse. Backup copies may persist after information is removed from active systems.

To request access, correction, export, or deletion of your account information, email info@spendledger.org. We may need to verify your identity. Available rights and exceptions depend on applicable law. You can also revoke Google sign-in access through your Google Account connections settings; revoking access does not by itself delete your SpendLedger account or cancel a subscription.

Public government records

Our public research pages contain government payment and procurement records obtained from official sources. These are separate from information you provide as an account holder. Deleting an account does not automatically remove independently sourced public records. Contact us about an inaccurate or sensitive public record and include the page and source reference so we can investigate. See our methodology.

Updates and contact

We will update the effective date when this policy changes and provide additional notice when required. Contact info@spendledger.org with questions. See also our Terms of Service.