Legal

Privacy Policy

Last updated: March 6, 2026

1. Information we collect

We may collect account identifiers, contact information, deduction records, uploaded receipts, report preferences, and operational/security logs.

2. How we use information

We use information to provide the service, secure accounts, generate reports, communicate service notices, and support customers.

3. Legal bases and permitted processing

Where applicable, processing is based on contract performance, legitimate interests, legal compliance, and consent where required.

4. Sharing and disclosures

We may share data with infrastructure, authentication, and email providers under contractual safeguards. We may disclose data if required by law, court order, or valid legal process.

5. Data retention

Retention periods are based on account status, legal obligations, and operational requirements. See Data and Compliance for current retention windows.

6. Security

We apply reasonable administrative, technical, and organizational security controls. No method of storage or transmission is guaranteed 100% secure.

7. Your controls

You can manage account profile data, request email verification actions, export your data when eligible, and request account deletion subject to retention obligations.

8. International use and jurisdiction

If data is processed in different regions, we use commercially reasonable safeguards appropriate to those transfers.

9. Changes to this policy

We may update this policy from time to time. Continued use after updates means you accept the revised policy.