Privacy policy
Draft — 2026-10-25, pending review by counsel. Operator: Mirai Studio, Inc. (株式会社みらいスタジオ), Tokyo, Japan. Questions and requests: security@spendctl.dev.
The sidecar you run
Section titled “The sidecar you run”The spendctl sidecar runs on your machines. Today it sends nothing to us: no keys, no signed payment authorizations, no request or response bodies, no ledger rows. Policy, approvals and the ledger stay on the systems you control. When the hosted control plane launches (Pro and Team), it will receive the data you choose to sync (policies, approval decisions, ledger copies) and licence and billing metadata, and this policy will be updated before that happens.
This website
Section titled “This website”Waitlist. If you join the waitlist we store your email address, the language of the page you used, and the plan you clicked, with a timestamp. We use them for one purpose: to tell you when the control plane opens. We do not send a newsletter. Each new sign-up also posts a notification with the same fields to a private Slack channel of ours.
Analytics. We use Google Tag Manager and Google Analytics to count visits and see which pages are read. In the EEA, the United Kingdom and Switzerland no analytics cookie is set unless you consent; until a consent banner exists, visits from those regions are measured without cookies only. Elsewhere, analytics cookies are set by default. Advertising features are off everywhere.
Hosting. The site is served by Cloudflare, which processes IP addresses and request metadata to deliver and protect it.
Rate limiting. The waitlist endpoint keeps a per-IP counter for one hour to block abuse. It is deleted automatically.
Processors
Section titled “Processors”Cloudflare (hosting, DNS, email routing, waitlist storage), Google (Tag Manager, Analytics), Slack (internal notifications). Data may be processed in the United States and other countries where these providers operate.
Retention
Section titled “Retention”Waitlist entries are kept until the control plane launches and for 12 months after, or until you ask us to delete them. Analytics data follows Google Analytics’ retention setting (14 months). Rate-limit counters expire after one hour.
Your rights
Section titled “Your rights”You can ask what we hold about you, ask for it to be corrected or deleted, or object to processing by writing to security@spendctl.dev. We answer within 30 days. If you are in the EEA or the UK you may also complain to your supervisory authority.
Changes
Section titled “Changes”We will post changes here with a new date. Material changes to what the sidecar sends us will be announced before they take effect.