Effective August 20, 2026
ExpenseMargin processes account information, organization details, supplier invoices, extracted invoice data, product and supplier histories, billing metadata, and application activity needed to provide the service.
We use this information to authenticate users, isolate organization workspaces, analyze invoices, calculate cost changes, deliver alerts, operate billing, improve reliability, prevent abuse, and support customers.
ExpenseMargin relies on infrastructure and service providers such as Supabase, Vercel, OpenAI, Stripe, and Resend when those integrations are enabled. Data is shared with providers only as needed to deliver the relevant service.
Invoice documents may be sent to the configured AI provider for structured extraction. ExpenseMargin uses its own deterministic application logic for financial comparisons and impact calculations.
Authorized workspace administrators can export organization data from ExpenseMargin. Export activity is recorded in the workspace audit trail.
Business records are retained while needed to operate the account, maintain purchasing history, satisfy contractual obligations, and meet applicable legal requirements. Formal retention and deletion schedules are maintained as part of the service security and compliance program.
ExpenseMargin uses tenant-scoped database policies, private file storage, HTTPS, server-side credential handling, and operational logging. No online system can guarantee absolute security.
We may update this policy as the product, providers, or legal requirements change. Material revisions will be reflected by updating the effective date.