Privacy Policy

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you use our site or engage our expense management services. Our services support expense structure analysis, expense management, cost optimisation, and budget monitoring.

We process personal data in accordance with applicable privacy laws, including Singapore’s Personal Data Protection Act 2012 and, where applicable, the European Union General Data Protection Regulation. This policy applies to visitors, customers, business representatives, authorised users, and other individuals whose personal data we process.

Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identification and business information, such as your name, job title, organisation, and business contact details.
• Account and service information, such as login credentials, account preferences, permissions, and records of your interactions with our online platform.
• Expense and financial management information, such as transaction categories, expense amounts, budget data, reimbursement information, cost-centre information, and related business records.
• Technical and usage information, such as device identifiers, browser type, IP address, approximate location, access times, operating system, and interactions with our site or service.
• Information you provide in enquiries, support requests, surveys, service feedback, or other communications.

How We Collect Personal Data

We may collect personal data directly from you, from your organisation or its authorised representatives, automatically when you use our site or service, or from service providers and other lawful sources. We expect organisations that provide personal data to us to have the necessary authority and permissions to do so.

How We Use Personal Data

We use personal data for legitimate business and service purposes, including:

• Providing expense analysis, expense management, cost optimisation, and budget monitoring services.
• Creating and administering user accounts, permissions, and service settings.
• Analysing spending patterns, preparing reports, identifying anomalies, and generating recommendations for cost control.
• Operating, maintaining, securing, and improving our site and online platform.
• Verifying identity and access rights, preventing fraud, detecting misuse, and protecting our users and systems.
• Processing invoices, agreements, payments, records, and other administrative requirements.
• Complying with legal, regulatory, accounting, audit, and law-enforcement obligations.
• Responding to enquiries, providing support, and managing our relationship with you or your organisation.

Legal Bases for Processing

Where the GDPR applies, we process personal data on one or more of the following legal bases:

• Performance of a contract or steps taken at your request before entering into a contract.
• Compliance with a legal obligation.
• Our legitimate interests, provided those interests do not override your rights and freedoms.
• Your consent, where consent is required or where we choose to rely on it.

Under the Singapore PDPA, we generally collect, use, and disclose personal data with consent or where otherwise permitted or required by law. You may withdraw consent where permitted, although this will not affect processing carried out before withdrawal and may affect our ability to provide certain services.

Disclosure of Personal Data

We may disclose personal data to the following categories of recipients where necessary and lawful:

• Cloud hosting, data storage, analytics, security, customer support, accounting, and other technology providers.
• Professional advisers, auditors, insurers, financial institutions, and business partners supporting our operations.
• Your organisation, account administrators, or other authorised users where the service is provided on an organisational basis.
• Courts, regulators, government authorities, and law-enforcement bodies where disclosure is required or permitted by law.
• A purchaser, investor, successor, or other relevant party in connection with a merger, acquisition, restructuring, or transfer of assets.

We do not sell personal data. We require service providers that process personal data on our behalf to maintain appropriate confidentiality and security safeguards.

International Data Transfers

Some service providers or recipients may process personal data outside Singapore or the country where you are located. Where required by law, we use appropriate safeguards for international transfers, such as contractual protections, adequacy decisions, or other legally recognised transfer mechanisms. You may request information about applicable safeguards by writing to us at our physical address below.

Cookies and Similar Technologies

Our site may use cookies and similar technologies to operate essential features, remember preferences, understand usage, maintain security, and improve performance. Where required, we will request consent before using non-essential technologies. You can manage cookies through your browser settings, although disabling them may affect site functionality.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain business and financial records, resolve disputes, enforce agreements, prevent fraud, and comply with legal obligations. When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with our retention procedures.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, collection, use, disclosure, alteration, loss, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your Privacy Rights

Subject to applicable law and relevant exceptions, you may have the right to:

• Request access to personal data we hold about you and information about how it is used or disclosed.
• Request correction of inaccurate or incomplete personal data.
• Request deletion or restriction of processing in circumstances provided by applicable law.
• Object to certain processing, including processing based on legitimate interests.
• Request portability of certain personal data where the GDPR applies.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a relevant data protection authority, including the Personal Data Protection Commission in Singapore or the authority in your place of residence where the GDPR applies.

To make a request, please write to us at: Jalan Bukit Merah, Singapore 159050. We may need to verify your identity before responding. We will respond within the period required by applicable law and may charge a reasonable fee or refuse a request where permitted by law.

Children’s Privacy

Our site and services are intended for businesses and professional users and are not directed to children. We do not knowingly collect personal data from children in circumstances prohibited by applicable law. If you believe that a child has provided personal data to us, please write to us at our physical address so that we can assess and take appropriate action.

Third-Party Sites and Services

Our site or service may contain links to third-party sites, applications, or services. Their privacy practices are governed by their own policies, and we are not responsible for their content or handling of personal data. We encourage you to review those policies before providing information.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technology, legal requirements, or privacy practices. The updated version will be published on our site, and the revised policy will apply from the time it is made available unless a different date is stated.

Contact and Complaints

For privacy requests, questions, or complaints about our handling of personal data, please write to us at Jalan Bukit Merah, Singapore 159050. We will review complaints fairly and take reasonable steps to address them in accordance with applicable law.