Sign in with Google, no passwords to lose
SpendixAI does not store passwords. You sign in with your Google account, with whatever protection, such as 2-step verification, you have set up there.
Financial records are personal. Here is how SpendixAI protects them, what you control, and where to report a problem.

SpendixAI does not store passwords. You sign in with your Google account, with whatever protection, such as 2-step verification, you have set up there.
SpendixAI never asks for your net-banking credentials or OTPs. Your records come from statements and receipts you upload and entries you make.
Each workspace’s data is kept apart from every other. Owners choose who joins and give each person a role that limits what they can see and change.
Rules and your own history categorise first, with no AI involved. You can switch individual AI features off, exclude sensitive accounts, set a spending cap, or turn AI off entirely.
Learn moreConnect Claude or ChatGPT with MCP and start read-only. You approve a scope when you connect and can disconnect any assistant at any time.
An audit log keeps track of sensitive actions in your workspace, so you can see what changed and when.
Traffic between your browser or phone and SpendixAI travels over encrypted connections.
Export your data, choose how long uploaded documents are kept, delete a range of transactions, or schedule deletion of the whole workspace with a 7-day window to change your mind.
Learn moreYou upload a statement or add an expense, into the account you choose.
The transactions are kept in your workspace, separate from everyone else’s.
Only for transactions your rules and history could not place, and only if AI is on, a model sees a merchant name and an amount band.
Read reports, export your data, delete transactions or delete the workspace.

Security is not only about keeping others out. It is also about giving you clear control over what is kept, who can see it and what happens to it.

Please tell us before sharing it publicly. Write to us with “Security” in the subject and include the steps to reproduce it. We read every report.
support@spendix.appSpendixAI uses Google sign-in only. It does not store passwords, so there is nothing separate to remember or reset.
Your records live in your own workspace, separate from other workspaces, with access limited by role. Read the Privacy Policy and the Security page for the details.
No. We do not sell personal information. The Privacy Policy lists who we share information with and why.
Yes. Workspace owners can export their data, choose how long documents are kept, delete transactions or a date range, and schedule deletion of the whole workspace with a 7-day window to change their mind. See the Data deletion page.
Yes, with MCP. You approve a scope when you connect, can start read-only and can disconnect an assistant at any time.
Create your account with Google and stay in control.