eWisspy

Last updated: April 12, 2026

Privacy policy

1. Introduction

Wisspy ("we", "our", "the Service") is an expense tracking application operated by Spectre Graphics, based in Tunis, Tunisia. This policy explains what data we collect, why, and how we protect it.

2. Data we collect

  • Account information: email address, display name, preferred currency, and timezone.
  • Platform connections: Telegram or WhatsApp ID when you use the bot.
  • Expense data: amounts, descriptions, merchants, categories, dates, currencies, and exchange rates.
  • Receipts: receipt images sent to the bot for OCR extraction. Images are processed and then deleted after extraction.
  • Voice notes: audio files sent to the bot for transcription. Files are processed and then deleted.
  • Usage data: technical logs (truncated IP address, user agent) for security and diagnostics.

3. How we use your data

We use your data exclusively to:

  • Provide the expense tracking service and generate your reports.
  • Process bot messages (parsing, OCR, voice transcription).
  • Send periodic summaries if you have enabled them.
  • Detect and prevent abuse (quotas, rate limiting).
  • Improve service reliability (error tracking via Sentry).

We never sell, rent, or share your financial data with third parties for advertising purposes.

4. Third-party services

  • OpenRouter / OpenAI: AI processing for expense parsing, OCR, and voice transcription. Data sent is minimal (message text or receipt image).
  • Sentry: technical error tracking. Personal data (email, phone, passwords) is automatically scrubbed before sending.
  • Telegram / WhatsApp: messaging platforms for bot interaction. Subject to their own privacy policies.

5. Storage and security

  • Data hosted in the European Union (France).
  • PostgreSQL database encrypted at rest.
  • Passwords hashed with bcrypt (never stored in cleartext).
  • Communications encrypted via HTTPS/TLS.
  • JWT tokens with short expiry (15 min access, 30 days refresh).
  • Daily encrypted backups with 30-day retention.

6. Data retention

Your expense data is kept as long as your account is active. Receipts and voice notes are processed in real time and are not retained after extraction. Technical logs are kept for 90 days maximum.

7. Your rights

You may at any time:

  • Access your data via the dashboard or CSV export.
  • Edit your profile information in settings.
  • Delete individual expenses.
  • Delete your account from the mobile app (Settings → Delete my account) or from the /delete-account page. Deletion is final after a 14-day cancellation window. Apple and Google OAuth tokens are revoked immediately.
  • Export all your data as CSV.

8. Cookies

Wisspy does not use third-party cookies or advertising trackers. We only use browser local storage (localStorage) to maintain your login session.

9. Changes

We may update this policy. Any changes will be published on this page with the update date. For material changes, we will notify you via the bot or by email.

10. Contact

For privacy-related questions, contact us at: [email protected]