Privacy notice

Draft for operator review. This service is not accepting public customers yet.

We process account identity, company membership, uploaded receipts, expense entries, generated files, subscription identifiers and limited operational events to provide this service. Expense records can contain personal and financial information; upload only material you are authorized to process.

Access and providers

Employees access their own reports and company administrators access company records. The owner dashboard contains account and business metrics, not receipt contents. Operational access to hosting and backups is restricted to authorized operators. Stripe processes payments; the application does not store card numbers. Transactional email is delivered through the configured mail provider. The final provider list and hosting region must be published before launch.

Retention and requests

Cancellation stops renewal, not immediate deletion. Saved files remain subject to the published retention policy. A production retention schedule and backup deletion window must be approved before public launch. Contact Support contact pending for export, access, correction or deletion requests. Account downloads do not replace your own recordkeeping obligations.

Telemetry

Essential session cookies support sign-in. Business telemetry records event type, account identifier and time. It does not include receipt text. No advertising trackers or session replay are installed. Email bodies are encrypted while queued and cleared after successful delivery or expiry.