Legal
Last updated: March 6, 2026
We may collect account identifiers, contact information, billing-related metadata, deduction records, uploaded receipts, report preferences, and operational/security logs.
We use information to provide the service, secure accounts, process billing, generate reports, communicate service notices, and support customers.
Where applicable, processing is based on contract performance, legitimate interests, legal compliance, and consent where required.
We may share data with infrastructure, payment, authentication, and email providers under contractual safeguards. We may disclose data if required by law, court order, or valid legal process.
Retention periods are based on account status, legal obligations, and operational requirements. See Data and Compliance for current retention windows.
We apply reasonable administrative, technical, and organizational security controls. No method of storage or transmission is guaranteed 100% secure.
You can manage account profile data, request email verification actions, export your data when eligible, and request account deletion subject to retention obligations.
If data is processed in different regions, we use commercially reasonable safeguards appropriate to those transfers.
We may update this policy from time to time. Continued use after updates means you accept the revised policy.