Privacy Policy
Effective: April 26, 2026 · Last updated: April 26, 2026
Plain-language summary
- Your bill PDF is processed in memory and never stored — it is gone when your report is generated.
- We store your contact details only if you choose to share them to unlock your report or request a specialist.
- We use analytics software to understand how the product is used — no personal data is shared with advertisers.
- We never sell your information to anyone, ever.
- We have no data-sharing relationship with any telecom carrier or ISP.
1. Who we are
SpendAdvisor is operated by International Tech Partners, LLC, a US limited liability company. We operate the website at spendadvisor.io and provide AI-powered telecom bill analysis to help businesses identify overpayments and negotiate better rates. This Privacy Policy explains how we collect, use, and protect information when you use our service.
For privacy inquiries, contact us at privacy@spendadvisor.io.
2. Information we collect
Your telecom bill (PDF)
When you upload a bill, it is transmitted to our servers over TLS encryption, processed entirely in memory by our proprietary AI system, and then permanently discarded. The PDF is never written to disk, never stored in a database, and is not retained in any form after your report is generated. This process completes within seconds of your upload.
Redaction tip: We only need the provider name, service type, connection speeds, and charge breakdown to generate your report. If you'd prefer extra privacy, you can redact your account number, street address, or contact details before uploading — the analysis will be equally accurate.
Analysis output (browser only)
The results of the analysis — provider name, service type, cost breakdown, and savings estimates — are returned directly to your browser and stored temporarily in your browser's session storage. This data never leaves your device after delivery and is cleared automatically when you close the tab. We do not retain a copy of your full analysis results on our servers.
Anonymized market intelligence data
After each successful analysis, we extract and store a small set of anonymized data points to build a neutral market intelligence database. Specifically, we record: carrier/provider name, ZIP code of the service address, service category (e.g., DIA, broadband), service type detail (e.g., “100 Mbps dedicated fiber”), connection speed, base monthly rate, total regulatory fees and surcharges, total taxes, and overall monthly cost.
We do not retain: your name, company name, account number, street address, email address, or any information that could identify you or your organization. This data is used exclusively to improve our rate benchmarking accuracy and to build an industry-neutral view of carrier pricing and fee practices by geography and service type.
Contact information (only when you choose to share it)
If you choose to unlock your full report, you will be asked to provide your name, email address, and optionally your company name. Providing this information is voluntary. By submitting it, you are requesting that we send you your report and, if applicable, connect you with a specialist. We store: your name, email, company name, the provider on your bill, service category, monthly cost, estimated savings range, and which report tier you selected.
We do not collect your account number, billing address, or any other identifying information from your bill.
Marketing attribution data
If you arrive at our site via an advertisement or referral link, we may capture URL parameters that tell us which channel brought you here. This includes UTM parameters (source, medium, campaign), advertising click identifiers from platforms such as Google (GCLID), Meta/Facebook (FBCLID), LinkedIn, and TikTok, and the referring domain. This data is stored only when you submit your contact information and is used solely to measure the effectiveness of our advertising. It is not shared with the advertising platforms in personally identifiable form.
Usage and analytics data
We use analytics software to understand how visitors use our site — which pages they visit, where they drop off, and how the tool performs. This includes anonymized event data such as file upload events, analysis completions, and report views. We use PostHog for this purpose, hosted on US infrastructure. Once you submit your contact information, analytics events may be associated with your email address to help us understand the full user journey. PostHog does not sell your data. See PostHog's Privacy Policy for details.
Server logs
Standard web server logs including IP address, browser type, and request timestamps. Used for security monitoring and rate limiting. Retained for up to 90 days and not linked to individual identities.
3. How we use your information
- To analyze your telecom bill and generate your report
- To send you your report summary when you request it
- To contact you about your savings findings if you request a specialist
- To build a neutral market rate database using anonymized data points (provider, ZIP code, service type, speed, base rate, fees — no personal information)
- To measure and improve the accuracy of our analysis
- To understand which marketing channels are driving qualified users
- To respond to support or privacy inquiries
- To monitor for abuse, fraud, and unauthorized use of our service
We do not use your data for advertising targeting, behavioral profiling, or sale to third parties. We do not contact you unless you have explicitly requested that we do so.
4. Data retention
Bill PDFs
Not retained. Processed in memory and permanently discarded within seconds of your report being generated. No backup, no log, no copy.
Analysis results
Not retained on our servers. Delivered to your browser session only. Cleared when you close the tab.
Anonymized market intelligence data
Provider, ZIP code, service type, speed, base rate, fees, and taxes — retained indefinitely to build our market rate database. Contains no personally identifiable information and cannot be linked back to you.
Contact and lead information
Retained until you request deletion, or for a maximum of 24 months following your last interaction with us, whichever comes first.
Analytics data
Retained per PostHog's data retention settings. Anonymous event data is retained for up to 12 months. You may request deletion at any time.
Server and function logs
Our hosting infrastructure retains function execution logs for up to 7 days. These logs contain: request timestamps, IP addresses, HTTP status codes, and internal processing notes (e.g., which analysis strategy succeeded). Filenames are not logged — each analysis is assigned a random request ID instead. Bill content and extracted data fields are never written to logs.
5. Third-party service providers
We work with the following third-party service providers. Each is bound by data protection agreements. We do not sell your data to any of these providers — they process data only as directed by us.
AI Processing Service
Your bill is processed by a proprietary AI system that uses a third-party AI infrastructure provider operating under enterprise API terms. Those terms explicitly prohibit the provider from using customer API inputs to train, fine-tune, or improve AI models. Bill content is transmitted solely to generate your analysis and is not retained by the provider after processing. No personally identifying information from your bill is stored by this provider.
Airtable — CRM and data storage
If you submit contact information, your lead record is stored in Airtable. Airtable is SOC 2 Type II certified and GDPR compliant. See Airtable's Privacy Policy.
Resend — Transactional email
If you submit your email address, we use Resend to send you notification emails. Resend processes your email address to deliver messages. See Resend's Privacy Policy.
PostHog — Product analytics
We use PostHog to understand how our product is used. PostHog receives anonymized usage events and, after you identify yourself via the email gate, may associate events with your email. PostHog does not sell data. See PostHog's Privacy Policy.
Vercel — Cloud hosting
Our application is hosted on Vercel's infrastructure. Vercel processes request data (IP addresses, request headers) as part of serving the application. See Vercel's Privacy Policy.
We have no data-sharing relationship with any telecom carrier, ISP, or internet service provider.
6. Cookies and tracking technologies
We use the following types of cookies and tracking technologies:
Essential session storage
Your analysis results are stored in your browser's session storage to display your report. This data is not a cookie and is cleared automatically when you close the tab. It never leaves your device.
Analytics cookies (PostHog)
PostHog sets a cookie to identify returning visitors and track session continuity. This cookie does not contain personally identifying information until you voluntarily submit your email address. You may opt out by enabling “Do Not Track” in your browser or contacting us.
No advertising cookies
We do not place advertising cookies, retargeting pixels, or third-party tracking scripts on our site. Attribution click IDs (GCLID, FBCLID, etc.) are read from URL parameters when you arrive from an ad — they are not set as cookies by us.
7. Field-by-field retention reference
The table below documents exactly which fields from a telecom invoice are retained and which are discarded. This applies to every bill analysis.
| Field | Retained? | Where / How long |
|---|---|---|
| Provider / carrier name | Yes — anonymized | Market Intelligence table, indefinitely |
| ZIP code of service address | Yes — anonymized | Market Intelligence table, indefinitely |
| Service type (DIA, broadband, etc.) | Yes — anonymized | Market Intelligence table, indefinitely |
| Connection speed / tier | Yes — anonymized | Market Intelligence table, indefinitely |
| Base monthly rate | Yes — anonymized | Market Intelligence table, indefinitely |
| Total fees and surcharges | Yes — anonymized | Market Intelligence table, indefinitely |
| Total taxes | Yes — anonymized | Market Intelligence table, indefinitely |
| Total monthly bill | Yes — anonymized | Market Intelligence table, indefinitely |
| Street address | No | Discarded after analysis |
| Account number | No | Discarded after analysis |
| Circuit ID / order number | No | Discarded after analysis |
| Contract term / expiry date | No | Discarded after analysis |
| Company name | No | Discarded after analysis |
| Contact name on bill | No | Discarded after analysis |
| Full bill PDF | No | Discarded immediately after analysis |
| Your name (if submitted) | Yes — identified | Leads table, 24 months or until deletion request |
| Your email (if submitted) | Yes — identified | Leads table, 24 months or until deletion request |
| Your company (if submitted) | Yes — identified | Leads table, 24 months or until deletion request |
| Request IP address | Yes — logs only | Server logs, up to 7 days |
| Filename of uploaded PDF | No | Not logged — replaced with random request ID |
8. Security
All data is transmitted using TLS encryption. Your bill PDF is processed entirely in server memory and is never written to persistent storage. Access to our systems and databases is restricted to authorized personnel and protected by authentication controls. We follow industry best practices for data handling and conduct regular security reviews. No method of transmission or storage is 100% secure — if you have concerns about a specific data type, contact us before uploading.
9. Your rights
California residents (CCPA)
Under the California Consumer Privacy Act, California residents have the right to: know what personal information we collect and how it is used; request deletion of personal information we hold; opt out of the sale of personal information (we do not sell personal information); and non-discrimination for exercising these rights. To make a request, email privacy@spendadvisor.io.
European residents (GDPR)
If you are located in the European Economic Area, you have rights under the General Data Protection Regulation including: access to your personal data; rectification of inaccurate data; erasure (“right to be forgotten”); restriction of processing; data portability; and the right to object to processing. Our legal basis for processing your contact information is your consent (given when you submit the email gate) and legitimate interest (analytics and security). To exercise any right, email privacy@spendadvisor.io.
We will respond to all verified privacy requests within 30 days.
10. Children's privacy
Our service is intended for business use by adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has submitted information through our service, contact us immediately at privacy@spendadvisor.io and we will delete it promptly.
11. Changes to this policy
We may update this policy to reflect changes in our practices or applicable law. We will update the effective date at the top of this page. For material changes, we will notify users who have provided contact information by email at least 14 days before the change takes effect. Continued use of the service after that date constitutes acceptance of the updated policy.
12. Contact
For privacy questions, data requests, or to report a concern:
SpendAdvisor
Email: privacy@spendadvisor.io
We aim to respond to all inquiries within 5 business days and all formal data requests within 30 days.