Privacy Policy

SpendFuse helps you stop runaway Cloudflare bills. Questions about this policy: help@spendfuse.dev.

• Account: email, name and password (stored only as a hash). With Google sign-in we receive your email, name and profile picture from Google.
• Cloudflare connection: account ID and name; your Workers' names, routes, custom domains and cron triggers; usage numbers and estimated costs per resource.
• The secret used to talk to the agent, stored encrypted. Your Cloudflare API token passes through our server once at connect time and is never stored; afterwards it lives only in the agent inside your own Cloudflare account.
• Alert channel targets you add (e.g. email, webhook, push keys), incidents and cut-off records.
• If you enable the SpendFuse SDK's realtime reporting: per-window spend totals and breaker state.

We cannot read your Worker source code or the contents of your databases or storage, and we don't collect personal data about your site's visitors.

Only to run the service: detecting unusual spend, sending alerts and daily reports, cutting off a Worker when you allow it, and keeping your account secure. We don't sell your data or use it for advertising.

• Cloudflare: hosts SpendFuse and its database.
• Resend: sends email (alerts, reports, password resets).
• Google: if you choose Google sign-in.
• The alert providers you configure (e.g. ServerChan, PushPlus, Telegram, Slack) receive the alert content.

Per-minute usage records are kept for 3 days, daily totals for 35 days, and only the latest SDK realtime state. Your account, settings and incidents are kept until you delete your account.

You can disconnect a Cloudflare account at any time in the dashboard (this also removes the agent) and delete the API token in Cloudflare. To export or delete your account data, email help@spendfuse.dev; we handle requests within 30 days.

We only use cookies needed for your sign-in session and language preference. No advertising or tracking cookies.

If this policy changes materially, we update the date above and let you know in the dashboard or by email.