Privacy Policy

SpendLens, operated by Rajdharma Technologies Pvt. Ltd., is committed to protecting customer billing data and personal information. This policy explains what we collect, why we process it, and how customers can request access or deletion.

Data we process

Cloud billing exports may include account IDs, project names, resource IDs, tags, regions, usage quantities, and cloud spend. We process these files solely to generate cloud cost governance analysis, findings, summaries, and PDF reports. We do not sell customer data.

Sensitive strings in billing tags

Cloud resource tags and names can accidentally contain email addresses, developer names, project identifiers, or internal references. SpendLens applies basic redaction for email addresses and obvious credential-like strings in parsed billing text before presenting analysis output, but customers should avoid uploading secrets, passwords, private keys, customer records, or unnecessary personal data.

Account information

We store the minimum information required to operate your account, such as name, email, organization, plan, usage counters, subscription status, and support communications.

Data retention

Free accounts do not receive stored report history. Paid plans may store analysis history and PDF export records for the plan retention window shown in the product. Raw uploaded CSV files are processed for the requested analysis; stored reports contain summaries, findings, and PDF metadata rather than a customer-facing raw CSV archive. See our Data Retention page for plan-level retention controls.

Deletion and access

You can delete your SpendLens account from Settings or request access, correction, export, or deletion by emailing us. Deletion removes SpendLens profile data, stored analyses, findings, usage counters, and PDF export records where technically available. Paddle invoices and payment records are managed by Paddle as merchant of record and may be retained for tax, fraud prevention, and legal obligations.

AI processing disclosure

Some analysis features may use trusted third-party AI providers to generate insights. Only the data necessary to produce the requested analysis is shared, and providers are bound by their own confidentiality and data-handling commitments.

Subprocessors

SpendLens currently relies on infrastructure and service providers including Supabase for authentication and database services, AWS/EC2 and Nginx for hosting, Paddle for checkout, billing, tax, and invoices, and OpenAI or equivalent AI providers for optional explanation generation. We may add email, monitoring, or support providers as the service matures and will keep this policy updated. A DPA is available for business and enterprise customers on request.

International processing

SpendLens is a global SaaS product operated by Rajdharma Technologies Pvt. Ltd. Data may be processed in countries where our infrastructure, payment, database, hosting, and AI providers operate. Current subprocessors include AWS/EC2 and Supabase; enterprise customers with data residency or sovereignty requirements should request the current hosting region and subprocessor list before onboarding. Where required, we rely on appropriate contractual, technical, and organizational safeguards for cross-border processing.

Security practices

We implement reasonable technical and organizational safeguards to protect uploaded data, including encryption in transit, least-privilege access controls, and ongoing review of our infrastructure. See our Security page for more detail.

Read-only processing

SpendLens performs read-only analysis of the billing data you provide and does not make infrastructure changes in your cloud accounts.

Cookies

We use essential cookies and local storage for sign-in, session state, preferences, and product security. Google Analytics is configured with Consent Mode so basic measurement can run with analytics storage denied until you allow analytics cookies. You can also control cookies through your browser settings.

Contact

For privacy questions email info@rajdharma.co.in.