Privacy policy
Last updated 15 September 2026
What we collect
Your name and email from Google sign-in; the business details you enter; and the expenses, receipts and notes you add, including receipt images. We also keep basic technical logs — device, browser, timestamps — to keep the service working.
Some data is processed by AI services
When you upload a receipt, the image and the text read from it are sent to third-party AI providers to extract the vendor, amount, date and GST. That means receipt contents leave our systems for processing. We send it through OpenRouter to the provider of the AI model we use, under that provider's terms; providers may keep it for a limited time under their own policies. If you would rather not have a receipt processed this way, enter the expense manually.
How we use it
To keep your records, read your receipts, produce your reports and readiness figures, and support you when you ask. We do not sell your data and we do not use it for advertising.
Who else sees it
Our hosting, storage and AI processing providers, only as needed to run the service. Anyone you invite to your account. Authorities, where the law requires it.
Storage and security
Records are encrypted in transit and at rest. Access is limited to staff who need it to operate or support the service.
How long we keep it
For as long as your account is active, and afterwards only as long as tax and company record-keeping rules require. You can ask us to delete your account and its records.
Your choices
You can export your records at any time from Reports, correct anything from the expense or receipt screens, and ask for a copy or deletion of your data by writing to [email protected].
Questions about your data? Write to [email protected].