Privacy Policy

Last updated: 25 June 2026

This Privacy Policy explains how SpendOS ("SpendOS", "we", "us") collects, uses, stores and protects information when you use the SpendOS application at app.spendos.sk. SpendOS is operated by Appticore s.r.o., Slovakia, which acts as the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

1. Who we are

SpendOS is a multi-tenant accounting tool that helps businesses manage bank transactions and match them with the corresponding invoices and receipts. For any privacy-related question or request you can contact us at pokorny@appticore.com.

2. Information we process

• Account data — your name, email address and authentication credentials.
• Bank and transaction data — account balances and transactions retrieved through our banking integration provider (SaltEdge) or imported from SEPA statement files.
• Documents — invoices, receipts and bank statements you upload or that are imported from connected sources, together with data extracted from them.
• Google Drive content — when you connect Google Drive, files from the folder you select (e.g. statement XMLs and invoices).
• Email inbox content — when you connect an email inbox over IMAP, the attachments relevant to accounting (statements, invoices).
• Technical data — basic logs needed to operate and secure the service.

3. How we use Google user data

If you choose to connect Google Drive, SpendOS requests read-only access (the drive.readonly scope) for the sole purpose of importing the accounting files you point us at — primarily SEPA bank statement XML files and invoices stored in a folder you select. We use this access only to read and import those files into your SpendOS workspace. We do not modify or delete anything in your Google Drive, we do not use Google data for advertising, and we do not sell it. Imported files and the data derived from them are stored securely and are accessible only within your tenant. You can revoke SpendOS's access at any time from your Google Account permissions or by disconnecting Google Drive inside SpendOS.

SpendOS's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Legal basis for processing

We process personal data to perform our contract with you (providing the service), to comply with legal obligations, and on the basis of your consent where required (for example, when connecting Google Drive or an email inbox).

5. Sharing and sub-processors

We do not sell your data. We share it only with service providers that help us operate SpendOS, under appropriate data-processing terms:

• Google — Drive API access for file import.
• SaltEdge — secure bank account and transaction aggregation.
• Our hosting provider — infrastructure on which SpendOS runs.

6. Data retention

We retain your data for as long as your account is active and as needed to provide the service and meet legal and accounting obligations. When you close your account or disconnect a source, the associated data is deleted or anonymised within a reasonable period, unless we are required to keep it by law.

7. Security

Access tokens and credentials are stored securely, data is segregated per tenant, and access is restricted to authorised users. We use industry-standard measures to protect data in transit and at rest.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to certain processing. To exercise any of these rights, contact us at pokorny@appticore.com. You also have the right to lodge a complaint with the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov SR).

9. Cookies

SpendOS uses only the cookies strictly necessary to keep you signed in and to operate the application securely. We do not use advertising or third-party tracking cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

Appticore s.r.o.
Email: pokorny@appticore.com