# Security and privacy at Traxpend

> Learn how Traxpend protects your financial data with zero third-party selling, bank-grade encryption, and bankless privacy architecture.

Canonical: https://www.traxpend.com/security
Last updated: 2026-10-16

## Who can see your money

- **Invite-only spaces**: only people you invite can join. Space admins decide who stays and who can manage members.
- **Never sold, never shared for ads**: data is used solely to run Traxpend for you, with no advertiser tracking.
- **Staff access is separate**: internal admin tools use their own authentication, kept apart from customer accounts.

## How it is protected

- **Encrypted in transit**: every connection uses HTTPS with HSTS and secure-only cookies.
- **Passwords are never stored**: only a salted, one-way PBKDF2 hash is kept.
- **Brute-force protection**: sign-in and password-reset attempts are rate-limited.
- **Signed links**: password-reset and space invite links are cryptographically signed, single-use and expire.
- **Monitoring**: production monitoring and error tracking.
- **Proven foundations**: Django and Django REST Framework with hardened production settings.

## You stay in control

- **Export any time**: full ledger as CSV on any plan; Pro adds PDF and Excel reports.
- **Delete your account**: permanently remove your account, spaces and personal data from Settings.
- **Self-service passwords**: change your password in Settings or reset it by email.

## FAQ

### Does Traxpend connect to my bank account?

No. You add expenses yourself by typing, speaking, or scanning receipts. Traxpend never asks for banking logins or passwords.

### Does Traxpend hold or move my money?

No. Traxpend calculates who owes whom and provides a UPI QR code or payment link. Money moves directly between people through their own payment apps.

### How do I report a security issue?

Email support@traxpend.app with the technical details.

## Related

- [Privacy policy](https://www.traxpend.com/privacy)
- [Pricing](https://www.traxpend.com/pricing)