Terms of Service
These Terms govern your use of Burnwiser (the "Service"), operated by Linkody, registered at Carrer Jaume 1 el Conqueridor 54, 3-1, Vic, 08500, Spain ("we", "us"). By creating an account or using the Service you agree to these Terms.
1. What Burnwiser does
Burnwiser helps founders track recurring software costs and compare them against revenue. You upload or forward invoices; we parse the vendor, amount, and billing period and group spend into projects. You may connect revenue sources (e.g. Stripe, FastSpring) to see a real profit-and-loss view. Burnwiser is not bookkeeping, tax, payroll, or banking software, and is not a substitute for professional financial advice.
2. Your account
You sign in with Google. You are responsible for keeping access to that Google account secure and for any activity that happens under your Burnwiser account. You must be at least 16 years old (or the age of digital consent in your country) to use the Service.
3. Acceptable use
You agree not to: (a) upload data you do not have the right to process; (b) attempt to access other users' accounts or data; (c) reverse-engineer, scrape, or place undue load on the Service; (d) use the Service to send spam or unlawful content; or (e) use the Service in violation of applicable law.
4. Plans and billing
Burnwiser offers a Free plan and a paid Studio plan. Studio is billed monthly or annually through Stripe at the prices shown on our pricing page at checkout. Subscriptions renew automatically until cancelled. You can cancel at any time from your account; cancellation takes effect at the end of the current billing period and no pro-rated refunds are issued for partial periods, except where required by law (including the EU right of withdrawal for consumers, where applicable).
Prices are shown in EUR and are exclusive of any applicable VAT, which is added at checkout where required.
Fair use. The Studio plan is described as "unlimited" for projects, invoices, and history because we want one founder running one business — or several — to never have to count. It is not intended to be shared across separate organisations, resold, used as bulk storage, or driven by automated scripts that generate volumes far outside normal human use. If your usage is materially out of line with these expectations we will contact you first and try to find a reasonable arrangement (e.g. a higher-tier plan); we reserve the right to throttle or suspend accounts that abuse the Service, but we will not do so silently for ordinary intensive use.
5. Your content
You retain all rights to the invoices, financial data, and other content you upload or connect ("Your Content"). You grant us a limited licence to host, process, and display Your Content solely to operate and improve the Service for you. We will not sell Your Content, share it with advertisers, or use it to train machine-learning models.
6. Service availability
We aim for high availability but do not guarantee uninterrupted access. We may modify, suspend, or discontinue features at any time. We will give reasonable notice of material changes that adversely affect paying customers.
7. Termination
You may close your account at any time. We may suspend or terminate accounts that violate these Terms or that we are required to suspend by law. On account deletion we erase Your Content as described in the Privacy Policy below.
8. Warranties and liability
The Service is provided "as is" and "as available", without warranties of any kind, whether express or implied, to the maximum extent permitted by law. To the maximum extent permitted by law, our total aggregate liability arising out of or relating to the Service is limited to the fees you paid us in the twelve (12) months preceding the event giving rise to the claim. Nothing in these Terms limits liability that cannot be limited under applicable law (including for gross negligence, wilful misconduct, or death or personal injury caused by negligence).
9. Changes to these Terms
We may update these Terms from time to time. If we make material changes we will notify you by email or in-app at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance.
10. Governing law
These Terms are governed by the laws of Spain, without regard to its conflict-of-law rules. Disputes will be brought before the competent courts of Vic, Spain, without prejudice to mandatory consumer-protection rules in your country of residence.
Privacy Policy
This Privacy Policy explains what personal data Burnwiser collects, why, how we use it, and what rights you have. It supplements the Terms above.
The data controller is Linkody, Carrer Jaume 1 el Conqueridor 54, 3-1, Vic, 08500, Spain. Contact for privacy questions: support@linkody.com.
Definitions
- Personal data — any information relating to an identified or identifiable individual.
- Processing — any operation performed on personal data (collection, storage, use, deletion, etc.).
- You / data subject — the natural person using Burnwiser.
- Service — the Burnwiser website and application.
- Processor / subprocessor — a third party that processes data on our behalf (e.g. our hosting provider).
Data we collect
Account data
When you sign in with Google we receive your email address, name, and Google profile picture URL. We store these to identify your account and address you in the product.
Financial data you upload or connect
To operate the Service we process the financial data you provide:
- Invoice PDFs you upload or forward, and the parsed line items (vendor, amount, currency, dates, billing period, project).
- Revenue data fetched from connected providers (e.g. Stripe, FastSpring) using API credentials you supply. We store the credentials encrypted at rest and use them only to read the data you have asked us to import.
- Manual entries you create (expenses, revenue, projects, notes).
Subscription & billing data
If you upgrade to Studio, Stripe collects and processes your payment details on its own infrastructure. We receive only a customer reference, the plan you chose, your billing country, invoice amounts, and subscription status. We do not see or store your full card number.
Usage data
We log standard request data — IP address, user-agent, timestamp, requested URL, response status — for security, debugging, and abuse prevention.
Google account & Gmail data
Burnwiser uses Google Sign-In, and (on the Studio plan, if you enable it) reads invoices from your Gmail inbox. This section describes what we access and what we do with it.
Limited Use disclosure. Burnwiser's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Scopes we request
openid,email,profile— to sign you in and identify your account.https://www.googleapis.com/auth/gmail.readonly— only if you connect Gmail invoice import on the Studio plan. Read-only; we cannot send, modify, or delete email.
What we do with Gmail data
When you connect Gmail invoice import, Burnwiser searches your inbox for messages that look like invoices or receipts (based on sender, subject, and attachment heuristics), fetches the matching emails and their attachments, and parses them into invoice records inside Burnwiser. We store the parsed structured data (vendor, amount, dates, line items) and the original attachment. We do not store the full body of emails that are not invoice-related.
What we do not do
- We do not use Gmail data for advertising.
- We do not sell or transfer Gmail data to third parties for purposes unrelated to operating the Service.
- We do not use Gmail data to train generalised machine-learning or AI models.
- Humans do not read your Gmail data, except (a) with your explicit consent, (b) to investigate abuse or comply with law, or (c) where strictly necessary for security or to fix a bug you have reported, and always limited to what is needed.
Revoking access
You can disconnect Gmail at any time from your Burnwiser account settings. You can also revoke our access directly from your Google Account permissions page. Revoking access stops future syncs; previously imported invoice data remains in your Burnwiser account until you delete it.
How we use data
- To provide and operate the Service (parsing invoices, building your P&L, syncing revenue).
- To authenticate you and keep your account secure.
- To bill you for Studio and send service-related emails (receipts, security notices, material changes).
- To diagnose bugs, prevent abuse, and improve the Service.
- To comply with legal obligations (e.g. retaining billing records for tax purposes).
Legal basis (GDPR)
- Performance of a contract — to provide the Service you have signed up for, including processing your invoices and revenue data and billing you for Studio.
- Legitimate interests — to keep the Service secure, prevent abuse, debug issues, and understand how the product is used in aggregate.
- Consent — for connecting Gmail invoice import. You can withdraw consent at any time.
- Legal obligation — to retain billing and tax records and respond to lawful requests.
Who we share data with
We do not sell personal data. We share data only with the subprocessors listed below, who act on our instructions under a data processing agreement.
- DigitalOcean, LLC — application and database hosting (Amsterdam, EU region).
- Stripe Payments Europe, Ltd. — subscription billing for the Studio plan.
- Google LLC / Google Ireland Ltd. — Google Sign-In, optional Gmail invoice import, and Google Tag Manager (tag delivery only; no analytics by Google itself).
- Microsoft Corporation — Microsoft Clarity, used to record anonymised product-usage analytics and session replays so we can diagnose UX issues. Clarity masks text inputs by default and we do not link recordings to your account identity.
We may also disclose data where required by law, to enforce our Terms, to protect our rights or those of our users, or as part of a corporate transaction (merger, acquisition, sale of assets), in which case we will notify affected users.
Retention
We keep your data for as long as your account is active.
- Free plan: dashboards display the most recent 12 months of expense and revenue history. Older entries may be retained but are not surfaced in the UI.
- Studio plan: dashboards show your full history for as long as your subscription is active.
- Account deletion: when you delete your account we erase Your Content within 30 days, except records we are legally required to keep (e.g. billing invoices, typically up to 10 years under EU/local accounting law).
- Server logs: retained for up to 90 days for security and debugging.
International transfers
Your account and financial data are stored in the EU (DigitalOcean's Amsterdam region). Some of our subprocessors (notably Stripe, Google, and Microsoft) may process limited data in the United States or other countries outside the EU/EEA. Where this happens, transfers are protected by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism, and (for US-based providers) by the EU-US Data Privacy Framework where the provider is certified.
Security
We use TLS for data in transit and encryption at rest for OAuth tokens and connected-service credentials. Access to production data is restricted to the minimum number of staff necessary and is logged. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we work to apply industry-standard practices.
Your rights
If you are in the EU/EEA, UK, or another jurisdiction with similar laws, you have the right to:
- Access the personal data we hold about you.
- Rectify data that is inaccurate or incomplete.
- Erase your data (the "right to be forgotten"), subject to legal retention obligations.
- Restrict or object to certain processing, including processing based on legitimate interests.
- Portability — receive a copy of your data in a machine-readable format.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with your local data-protection authority.
To exercise any of these rights, email support@linkody.com. We respond within 30 days.
Cookies & tracking
Essential cookies. A session cookie keeps you signed in and a CSRF token protects form submissions. These cannot be disabled without breaking the Service.
Product analytics. We load Google Tag Manager, which in turn loads Microsoft Clarity. Clarity sets cookies and collects anonymised usage data — page views, clicks, scrolls — and records session replays of how visitors interact with the site so we can find and fix UX problems. Clarity masks text you type into form fields by default, and we do not use it to identify you personally or to build advertising profiles. Data is processed by Microsoft in the United States; see Microsoft's privacy statement and Clarity's cookie list for details.
No advertising. We do not run advertising trackers and we do not sell your data to advertisers.
You can block Clarity at the browser level (most ad/tracker blockers do so), or opt out of Microsoft analytics products via Microsoft's opt-out page. If we add further analytics or tracking in the future we will update this section.
Children
Burnwiser is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes to this Privacy Policy
We may update this Policy from time to time. The "Effective" date at the top reflects the latest version. For material changes we will notify you by email or in-app before the changes take effect.
Contact
If you have any questions about these Terms or this Privacy Policy, contact us at support@linkody.com or by post at Linkody, Carrer Jaume 1 el Conqueridor 54, 3-1, Vic, 08500, Spain.