Privacy Policy

Spendline, Inc. · Last updated: October 3, 2026

Spendline, Inc. ("Spendline," "we," "our," or "us") operates the AI spend attribution and FinOps platform available at spendline.ai. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to it.

1. Information We Collect

We collect information you provide directly, information generated by your use of the service, and information about your organization's AI API usage routed through the Spendline proxy.

• Account data: email address, name, company name, and authentication credentials.
• Usage metadata: API call counts, token counts, model identifiers, latency, cost estimates, customer tags, workflow tags, and other metadata you attach to requests.
• Billing information: AI spend ranges and plan tier. Payment processing is handled by a third-party processor; we do not store full payment card data.
• Waitlist data: name, email, company, and estimated monthly AI spend submitted via the request access form.

2. How We Use Your Information

• To operate, maintain, and improve the Spendline platform.
• To generate cost attribution analytics, budget enforcement decisions, and financial records as directed by you.
• To send service communications, security alerts, and product updates.
• To respond to support requests and inquiries.
• To comply with legal obligations.

3. Proxy Traffic and API Request Data

Spendline operates as an in-path proxy for LLM API calls. We process request and response metadata (token counts, model names, latency, HTTP status codes) to generate cost records. By default, we do not store the content of prompts or completions. If prompt logging is explicitly enabled by an account administrator, that data is retained as configured and subject to the data retention settings you control.

4. Data Sharing

We do not sell your personal information. We share data only:

• With service providers acting on our behalf (hosting, analytics, payment processing) under data processing agreements.
• As required by law, court order, or to protect the rights, property, or safety of Spendline, our users, or others.
• With your consent or at your direction.

5. Data Retention

We retain account data for as long as your account is active. Usage metadata and financial records are retained for the period required to support your FinOps workflows, as configured in your account settings. You may request deletion of your data at any time by contacting us.

6. Security

We use industry-standard security controls including TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. See our Security page for more detail.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, and to data portability. To exercise any of these rights, contact us at fida@spendline.ai.

8. Cookies and Tracking

We use essential session cookies for authentication. We do not use advertising or behavioral tracking cookies. We may use privacy-respecting analytics to understand aggregate product usage.

9. International Transfers

Spendline is operated in the United States. If you access the service from outside the US, your data may be transferred to and processed in the United States.

10. Public Calculators and Spendline in ChatGPT

Some Spendline tools work without an account: the calculators on this site and, where available, Spendline's estimating tools inside ChatGPT.

• On this site: the AI margin calculator runs in your browser. The numbers you type are not sent to us.
• Inside ChatGPT: when you use a Spendline tool, we receive only the inputs for that tool: model names, token and request counts, or the business figures for a margin calculation. We use them to compute the answer and return it. We do not store them, and we do not receive the rest of your conversation.
• Identifiers: OpenAI may attach an anonymous user or conversation identifier and an approximate location to those requests. We do not store or use them.
• Usage counts: we count how often each tool is used. The count is not linked to a person.
• Request logs: our hosting provider keeps standard request logs (time, path, response status and the calling IP address) for up to 90 days.
• Sensitive data: these tools never ask for passwords, API keys or payment details. Please do not enter them.

We do not sell these inputs or pass them on to anyone. Like the rest of the service, requests are processed on our hosting provider's servers. Your use of ChatGPT itself is governed by OpenAI's privacy policy.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use after changes constitutes acceptance of the updated policy.

12. Contact

Questions about this policy? Contact us at fida@spendline.ai.