Privacy

Draft for legal review. Every statement below describes something the system actually does; the legal wording has not yet been reviewed by counsel.

What we hold about you

• Your account: your email address, used to sign you in. There is no password.
• Your memberships: which workspaces you belong to, your role in each, and the invitations you sent or accepted.
• What you did: a log of your actions — claiming a receipt, approving an order, changing a setting — kept for seven years as an audit record. After you delete your account, this log refers to an identifier that no longer resolves to a person.

What a workspace holds

When you claim a receipt into a workspace, its line items become that workspace's business record, visible to every member of the workspace. An itemised purchase history can reveal things about a person — health, diet, religion, alcohol — so before you claim a receipt into an employer's workspace, know that its members will see every line. Lynitem does not yet let you hide individual items.

Workspaces also hold the card transactions they import, the purchase orders they raise, their accounting journals, and their policy rules. Those belong to the business, are readable only by its members, and are deleted when the owner deletes the workspace — except posted accounting records, which must be kept for seven years.

What we do not do

• We do not sell or share purchase data with brands or anyone else.
• We do not read line items across workspaces.
• We do not send your data to an advertising or analytics vendor.
• We do not call an AI model with your line items. When we do, this page will name the provider and what it receives.

Who processes it

The database and sign-in run on Supabase. The web application runs on Vercel, which keeps request logs for 90 days; claim secrets never appear in them. Webhook events a workspace configures are sent to the URL it chose and carry identifiers only, never line items.

How long

• Receipts and accounting records: seven years (statutory).
• Claim link hashes: one year after they expire.
• Operational logs: 90 days.
• Your account and memberships: until you delete them.

Your rights

From your account page you can download everything we hold about you as a person, and delete your account. Deletion ends your membership of every workspace and removes your sign-in. If you are the only owner of a workspace, hand it to someone else or delete it first, so no business is left without an owner. A workspace owner can delete a workspace and everything that is its from the Workspaces page.

Contact

Questions about your data: write to the address on the sign-in page. This notice will name a data protection contact once one is appointed.