Privacy Policy

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when providing expense analysis services through our online platform. Our services include expense structure analysis, cost optimisation strategies, financial reporting, and budget management support for businesses.

We handle personal data in accordance with applicable privacy and data protection laws, including Singapore’s Personal Data Protection Act 2012 and, where applicable, the European Union General Data Protection Regulation.

Personal Data We Collect

Depending on how you use our services, we may collect the following categories of personal data:

• Identification and business contact information, such as your name, job title, organisation, and business address.
• Account and service information, including access details, preferences, service requests, and records of our interactions with you.
• Financial and expense information supplied for analysis, such as transaction records, invoices, budgets, spending categories, supplier information, and cost-centre data.
• Technical and usage information, such as device information, browser type, approximate location, access times, and interactions with our online platform.
• Information you provide when requesting support, submitting feedback, or otherwise engaging with our services.

How We Use Personal Data

We may use personal data to:

• Deliver expense analysis, cost optimisation, financial reporting, and budget management services.
• Review spending patterns, identify inefficiencies, prepare reports, and develop recommendations.
• Create and manage accounts, verify users, process service requests, and provide support.
• Maintain, secure, troubleshoot, and improve our online platform and services.
• Meet legal, regulatory, accounting, audit, fraud-prevention, and record-keeping obligations.
• Protect our rights, users, systems, confidential information, and business operations.

Legal Bases for Processing

Where the GDPR applies, we process personal data on one or more of the following legal bases:

• Performance of a contract or steps taken at your request before entering into a contract.
• Compliance with a legal obligation.
• Our legitimate interests, provided those interests do not override your rights and freedoms.
• Your consent, where consent is required by law.

Financial and Confidential Information

Please provide only the financial, expense, and business information necessary for the requested service. You are responsible for ensuring that you have the authority to provide information relating to your organisation, employees, suppliers, customers, or other individuals. We use information supplied for analysis only for legitimate business purposes and in accordance with applicable instructions and agreements.

Cookies and Similar Technologies

Our online platform may use cookies and similar technologies that are necessary for security, authentication, functionality, preferences, analytics, and service improvement. Where required, we will request consent before using non-essential technologies. You may manage cookies through your browser settings, although disabling certain cookies may affect platform functionality.

Disclosure of Personal Data

We may disclose personal data only where reasonably necessary and lawful, including to:

• Service providers that support hosting, data security, analytics, accounting, infrastructure, and platform operations.
• Professional advisers, auditors, insurers, and other authorised business partners subject to appropriate confidentiality obligations.
• Government authorities, regulators, courts, or law-enforcement bodies where required or permitted by law.
• A successor entity in connection with a merger, acquisition, restructuring, financing, or sale of assets, subject to appropriate safeguards.

International Data Transfers

Some service providers or recipients may process personal data outside Singapore or your country of residence. Where required, we apply appropriate safeguards, such as contractual protections, adequacy decisions, approved transfer mechanisms, or other lawful measures.

Data Retention

We retain personal data only for as long as reasonably necessary to provide our services, administer business relationships, resolve disputes, enforce agreements, maintain appropriate records, and comply with legal or regulatory obligations. Retention periods may vary according to the nature and sensitivity of the information.

Data Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your Privacy Rights

Subject to applicable law, you may have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion or restriction of processing in appropriate circumstances.
• Object to processing based on legitimate interests or direct marketing, where applicable.
• Withdraw consent where processing is based on consent.
• Request portability of certain personal data where the right applies.
• Lodge a complaint with the relevant data protection authority.

We may need to verify your identity before processing a request. Legal exceptions, contractual obligations, and applicable limitations may affect the exercise of these rights.

Children’s Privacy

Our services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children who are below the minimum age permitted under applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data practices. The updated policy will be made available through our online platform, and the revised version will apply from its stated publication date.

Contact and Data Protection Requests

For privacy questions, access requests, correction requests, or other data protection matters, please write to us at the following physical address: