How your data is protected
Access control, encryption, and what we can and cannot see.
Access rules are enforced in the database itself, not in the app. That distinction matters: even if a bug let the interface ask for the wrong data, the database refuses to return it.
What that means in practice
- Your expenses and reports are readable by you, and by approvers only for reports routed to them.
- Support staff cannot browse your data. Access is limited to an explicit allowlist held outside the database.
- Every support read of a customer record is written to an audit log, including attempts that find nothing.
- Chat messages are encrypted on your device before sending. We store only ciphertext.
Your rights
You can export everything we hold about you, or delete your account and data, from Profile → Privacy & data. We comply with India's DPDP Act 2023; a named Grievance Officer handles requests.