Your inbox stays yours
LiveSpend checks new messages in your connected inbox to identify supported bank transaction alerts. Depending on the provider and sync path, it may temporarily inspect message metadata or content before determining whether a message is relevant. It cannot send email, edit messages, or delete anything from your inbox, and it does not store unrelated email content.
Your bank login stays with your bank
You never enter online banking credentials into LiveSpend. It does not sign in to online banking, move money, or make payments.
Designed to keep less
LiveSpend stores the purchase details needed for your spending view, such as the merchant, amount, and date. It does not store full card numbers, CVVs, card expiration dates, or unrelated email content.
Reviewed, transparent, and reversible
The Gmail integration passed a CASA Tier 2 security assessment for the Google user-data connection. The Microsoft connection uses delegated Microsoft Graph permissions and does not request permission to send, edit, or delete email. No online service can promise zero risk, so LiveSpend keeps each connection under your control: disconnect it at any time to stop future syncing. LiveSpend does not sell your data, and the Privacy Policy explains the complete data flow, service providers, retention, and deletion choices.