Privacy Policy

This Privacy Policy describes how personal information is collected, used, and shared when you visit and use neospend.de ("NeoSpend", "the Service"). By using NeoSpend, you consent to the data practices described in this policy.

1. Responsible Party

Nils Plützer
Email: contact@nils-pzr.eu
Website: neospend.de

2. Data Collection

We collect the following types of data when you use NeoSpend:

• Account Data – name, email address, and profile information provided during registration.
• Financial Data – transactions, budgets, categories, and other financial records you enter into the Service.
• Usage Analytics – IP address, browser type, device information, pages visited, and interaction patterns to improve the Service.

3. Data Storage & Security

Your data is processed and stored securely using industry-standard encryption and security practices. Technical and organizational measures are in place to protect against unauthorized access, alteration, disclosure, or destruction of your personal data.

4. Third-Party Services

NeoSpend relies on the following third-party services to operate:

• Hetzner Online GmbH – server hosting, including the database where your account and financial data are stored (data centers in Germany)
• Resend – delivery of transactional emails such as email verification, password reset, contact form messages and newsletter emails; your email address and the email content are processed for this purpose
• Have I Been Pwned – when you set a password, we check whether it has appeared in a known data breach. Only the first five characters of the password's SHA-1 hash are sent (k-anonymity); your password itself and your email address are never transmitted
• Better Auth Infrastructure (better-auth.com) – authentication runs on our own server; for security monitoring and an admin dashboard, authentication events (e.g. sign-up, sign-in, sign-out) including user ID, name, email address, IP address, approximate location and browser user agent are sent to the Better Auth dashboard service

Some of these services may process data outside the EU. Where this is the case, data is only transferred with appropriate safeguards such as Standard Contractual Clauses (SCCs).

5. Cookies & Sessions

NeoSpend uses essential cookies and session tokens to keep you signed in and to maintain your preferences. These are strictly necessary for the Service to function and cannot be disabled. We do not use third-party tracking cookies or advertising cookies.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, your personal data and financial records will be permanently removed within 30 days. Anonymized usage analytics may be retained for statistical purposes.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access – request a copy of your personal data.
• Right to Rectification – request correction of inaccurate or incomplete data.
• Right to Erasure – request deletion of your personal data.
• Right to Data Portability – request your data in a structured, machine-readable format.
• Right to Object – object to the processing of your personal data.

To exercise any of these rights, contact us at contact@nils-pzr.eu.

8. Updates

This policy may be updated from time to time. We will notify you of significant changes via email or a notice within the Service.

Last updated: October 2026