Privacy Policy | Incurdesk

Last updated: June 2026

This Privacy Policy explains how Incurdesk ("we", "us", "our") collects, uses, and protects information when you use our expense management platform and website (the "Service"). By using the Service you agree to the practices described here.

1. Who we are

Incurdesk provides AI-assisted expense management software that lets teams capture receipts, categorize spending, apply approval policies, and export to accounting systems. For privacy questions, contact support@incurdesk.com.

2. Information we collect

Account information — your name, work email, company name, and role when you register or are invited to a workspace.
Expense and receipt data — receipt images, merchant names, amounts, dates, line items, tax and GL codes, approval decisions, and notes you or your team submit.
Billing information — plan selection and billing contact. Card payments are handled by our third-party payment provider; we do not store full card numbers on our servers.
Usage and device data — pages viewed, features used, approximate location derived from IP address, browser and device type, and similar diagnostic data.
Email engagement — if you receive our emails, we record opens and link clicks to measure and improve our communications.
Cookies — see our Cookie Policy.

3. How we use information

To provide, operate, and secure the Service, including AI-assisted categorization and policy checks.
To process transactions and manage your subscription.
To communicate about your account, support requests, and product updates.
To improve features, detect fraud and abuse, and maintain reliability.
To comply with legal, tax, and accounting obligations.

4. Legal bases (EEA/UK users)

Where the GDPR applies, we process personal data on the bases of performance of a contract, our legitimate interests in operating and improving the Service, your consent (which you may withdraw), and compliance with legal obligations.

5. How we share information

We do not sell your personal information. We share data only with service providers who help us run the Service under confidentiality obligations — including cloud hosting, email delivery, payment processing, and IP geolocation providers. We may also disclose information where required by law or to protect our rights and our users.

6. Data retention

We retain account and expense data while your account is active and as needed to provide the Service, then for any period required to meet legal, tax, and accounting obligations. You may request deletion as described below.

7. Security

We protect data in transit and at rest and apply access controls and tenant isolation. See our Security page for details.

8. International transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards for such transfers.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, export, or object to the processing of your personal data, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know and delete personal information and not to be discriminated against for exercising those rights. To exercise any right, email support@incurdesk.com.

10. Children

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect data from children.

11. Changes

We may update this policy from time to time. Material changes will be posted here with a new date.

12. Contact

Questions about this policy? Email support@incurdesk.com.