eWisspy
Create account

Last updated: June 24, 2026

Privacy policy

1. Introduction

Wisspy ("we", "our", "the Service") is an expense tracking application operated by Spectre Graphics, based in Tunis, Tunisia. This policy explains what data we collect, why, and how we protect it.

2. Data we collect

  • Account information: email address, display name, preferred currency, and timezone.
  • Platform connections: Telegram or WhatsApp ID when you use the bot.
  • Expense data: amounts, descriptions, merchants, categories, dates, currencies, and exchange rates.
  • Receipts: receipt images sent to the bot for OCR extraction. Images are processed and then deleted after extraction.
  • Voice notes: audio files sent to the bot for transcription. Files are processed and then deleted.
  • Usage data: technical logs (truncated IP address, user agent) for security and diagnostics.

3. How we use your data

We use your data exclusively to:

  • Provide the expense tracking service and generate your reports.
  • Process bot messages (parsing, OCR, voice transcription).
  • Send periodic summaries if you have enabled them.
  • Detect and prevent abuse (quotas, rate limiting).
  • Improve service reliability (error tracking via Sentry).

We never sell, rent, or share your financial data with third parties for advertising purposes.

4. Third-party services

  • OpenRouter / OpenAI: AI processing for expense parsing, receipt OCR, and voice transcription. Only the minimum data needed is sent (the message text or the receipt image), and it is not used to train third-party models.
  • Sentry: technical error monitoring. Personal data (email, phone number, passwords) is automatically scrubbed before any report is sent.
  • PostHog: privacy-friendly product analytics, hosted in the European Union. Used to understand how features are used and to improve the product. Loaded only after you accept analytics cookies.
  • Lemon Squeezy: payment and subscription processing for the web. When you subscribe, Lemon Squeezy acts as merchant of record and handles your billing details; we never store your full card number.
  • RevenueCat: in-app purchase and subscription management for the mobile apps. Actual payments are processed by the Apple App Store or Google Play.
  • Google (Analytics 4, Google Ads), Meta (Facebook/Instagram) Pixel, TikTok Pixel: advertising measurement tools, loaded only if you accept marketing cookies (see section 10).
  • Telegram / WhatsApp: messaging platforms used for bot interaction. Your use of them is also subject to their own privacy policies.

5. Storage and security

  • Data hosted in the European Union (France).
  • PostgreSQL database encrypted at rest.
  • Passwords hashed with bcrypt (never stored in cleartext).
  • Communications encrypted via HTTPS/TLS.
  • JWT tokens with short expiry (15 min access, 30 days refresh).
  • Daily encrypted backups with 30-day retention.

6. Data retention

Your expense data is kept as long as your account is active. Receipts and voice notes are processed in real time and are not retained after extraction. Technical logs are kept for 90 days maximum.

7. Your rights

You may at any time:

  • Access your data via the dashboard or CSV export.
  • Edit your profile information in settings.
  • Delete individual expenses.
  • Delete your account from the mobile app (Settings → Delete my account) or from the /delete-account page. Deletion is final after a 14-day cancellation window. Apple and Google OAuth tokens are revoked immediately.
  • Export all your data as CSV.

8. Cookies

By default, Wisspy only uses strictly necessary storage: browser local storage (localStorage) to keep you signed in and to remember your cookie choices. These are required for the service to work and cannot be switched off.

Analytics and marketing cookies and pixels are optional and are never loaded until you accept them through the consent banner. You can change or withdraw your choice at any time from the bottom of this page (see section 10).

9. Changes

We may update this policy. Any changes will be published on this page with the update date. For material changes, we will notify you via the bot or by email.

10. Cookies and marketing pixels

When you accept cookies via the banner, we use ad-measurement tools to evaluate how our campaigns perform and to introduce Wisspy to new users. You can change your choice at any time from the bottom of this page.

Tools used: Meta (Facebook/Instagram) Pixel and Conversions API, Google Ads and Google Analytics 4, TikTok Pixel. These services may receive your IP address, browser, language, and — if you are signed up — a hashed identifier derived from your email address (never the plain email) so that conversions can be attributed.

If you decline, none of these tools are loaded. We only keep the strictly necessary cookies required to operate your account.

11. Contact

For privacy-related questions, contact us at: [email protected]

You can change your choice: