Privacy Policy

This Privacy Policy explains how Expenu collects, uses, stores, protects, and discloses information when you use the Expenu website, web application, mobile application, and related services.

Effective Date: September 29, 2026

Last Updated: September 29, 2026

Service: Expenu

Website: https://expenu.com

Application: https://app.expenu.com

Privacy Contact: [email protected]

Important: Expenu is a financial organization and expense-management tool. Expenu does not provide banking, investment, tax, accounting, legal, financial-advisory, or other regulated professional advice unless expressly stated otherwise. Contents

Scope of This Policy
Who We Are
Information We Collect
Financial and Transaction Information
Workspace, Family and Office Information
Files and Attachments
Device and Technical Information
Location Information
Communications
Artificial Intelligence Features
Cookies and Similar Technologies
How We Use Information
Legal Bases for Processing
When We Share Information
Service Providers
Payments and Billing
Security
Data Retention
Data Deletion
Your Privacy Rights
International Data Transfers
Children's Privacy
Third-Party Services and Links
Marketing Communications
Changes to This Privacy Policy
Contact Us

1. Scope of This Policy

This Privacy Policy applies to information processed through Expenu's websites, web applications, mobile applications, APIs, account systems, workspaces, customer-support channels, and other services that link to this Privacy Policy.

It applies to information relating to individual users, workspace members, family members, employees, administrators, business users, and visitors to the Expenu website.

If you use Expenu on behalf of an organization, the organization may control certain information processed within its workspace. In those circumstances, your organization's relationship with Expenu may also govern how your information is handled.

2. Who We Are

Expenu is operated by:

9VN Communication Pvt Ltd
SCR 201, 3rd Floor,
150 Meters from Venus Inn Restaurant,
Towards Mausima Flyover,
Bapuji Nagar,
Bhubaneswar, Odisha 751009,
India.

Contact: [email protected]

Telephone: +91 7894666662

3. Information We Collect

3.1 Information You Provide

Depending on how you use Expenu, we may collect information that you provide directly, including:

Name and display name
Email address
Telephone or mobile number where provided
Login credentials and authentication information
Workspace information
Profile information
Business or organization information
Currency and regional preferences
Financial account information you choose to record
Income and expense information
Categories, notes, tags and descriptions
Budgets and financial goals
Payment and reimbursement information
Family and workspace membership information
Files and attachments you upload
Support requests and communications
Other information you voluntarily submit

3.2 Information Collected Automatically

We may automatically collect technical and usage information, including:

IP address
Browser type and version
Operating system
Device type
Application version
Language and locale
Time zone
Approximate geographic information derived from technical data where applicable
Pages and features accessed
Authentication and session events
Error and diagnostic information
Security and audit events
Performance information
Referral and campaign information where applicable

3.3 Information From Other Sources

Where supported and authorized by you, we may receive information from third-party services, payment providers, authentication providers, financial-data providers, communication providers, or other integrations.

The specific information received depends on the integration, permissions granted, and the functionality being used.

4. Financial and Transaction Information

Expenu is designed to help users organize and manage financial information. You may voluntarily enter or import information such as:

Income
Expenses
Transactions
Account balances
Account names
Account identifiers and last-four information where supported
Debts and obligations
Transfers
Categories
Budgets
Financial notes
Receipts and supporting documents

Financial information entered into Expenu is used to provide the functionality you request, including transaction management, reporting, calculations, insights, categorization, budgeting, and related features.

Expenu does not sell your personal financial information.

5. Workspace, Family and Office Information

Expenu may support different workspace structures, including individual, family, and office/business workspaces.

Depending on your workspace and role, we may process:

Workspace name and type
Workspace membership
User roles
Permissions
Visibility settings
Approval requests
Approval decisions
Audit events
Employee/member information
Financial records associated with the workspace

Workspace administrators may have access to information belonging to the workspace according to the permissions and access controls configured by the workspace and Expenu.

You should not upload information to a workspace unless you have the authority to do so.

6. Files and Attachments

Expenu may allow you to attach files to transactions and other supported records.

These files may include receipts, invoices, documents, or other supporting information you choose to upload.

We may process file metadata such as:

Original filename
File type
File size
Upload date
Associated workspace or record

Files are subject to authorization and access controls. You should avoid uploading highly sensitive information unless it is necessary for the Expenu functionality you are using.

7. Device and Technical Information

When you access Expenu through a browser or mobile application, we may process technical information necessary to operate, secure, troubleshoot, and improve the service.

This can include device identifiers, application version, operating system information, browser information, IP address, crash information, and technical logs.

We use this information primarily for service operation, security, diagnostics, fraud prevention, and reliability.

8. Location Information

Expenu does not require precise device location for ordinary income and expense management functionality.

If a particular feature explicitly requests location access, the application will request the relevant operating-system permission where applicable.

You may generally control device-level location permissions through your operating system settings.

9. Communications

We may send service-related communications including:

Account verification messages
Password-reset messages
Security alerts
Important account notifications
Billing and subscription notifications
Workspace notifications
Support communications
Changes to our services or policies

Certain communications are necessary for providing the service and cannot necessarily be opted out of while maintaining an active account.

10. Artificial Intelligence Features

Expenu may provide artificial-intelligence-assisted features, including financial insights, categorization, summaries, recommendations, or other productivity features.

Where an AI feature is used, information necessary to produce the requested result may be processed by the relevant AI infrastructure or service provider.

AI-generated information may be incomplete, inaccurate, or unsuitable for a particular situation. AI functionality should not be treated as professional financial, investment, tax, accounting, legal, or medical advice.

Expenu does not represent AI-generated results as guaranteed financial outcomes.

Where specific AI providers or processing arrangements are used, additional disclosures may be provided in the relevant feature or updated in this Privacy Policy.

11. Cookies and Similar Technologies

Expenu may use cookies, local storage, session storage, and similar technologies necessary to operate the website and application.

These technologies may be used for:

Authentication
Session management
Security
User preferences
Application functionality
Performance and diagnostics
Analytics where enabled

Disabling certain cookies or browser storage may prevent parts of Expenu from functioning correctly.

12. How We Use Information

We may use information to:

Provide and operate Expenu
Create and manage user accounts
Authenticate users
Manage workspaces and memberships
Process transactions and financial records
Generate reports and insights
Provide AI-assisted functionality
Process attachments
Process subscriptions and billing
Provide customer support
Send service communications
Prevent abuse and unauthorized access
Detect and investigate security incidents
Monitor service performance
Debug and improve the service
Maintain audit records
Comply with legal obligations
Enforce our agreements and policies
Protect the rights, safety, and property of users and Expenu

13. Legal Bases for Processing

Depending on the applicable law and circumstances, we may process personal information based on one or more of the following:

Your consent
Performance of a contract with you
Compliance with legal obligations
Legitimate interests
Protection of rights, safety, and security

Where processing relies on consent, you may withdraw consent where permitted by applicable law. Withdrawal does not affect processing that occurred before withdrawal.

14. When We Share Information

We do not sell personal information.

We may disclose information in limited circumstances, including:

14.1 Service Providers

We may use vendors that provide hosting, infrastructure, authentication, communications, storage, analytics, payment, security, AI, or other services necessary to operate Expenu.

14.2 Workspace Administrators

Information within an organization, family, or office workspace may be accessible to authorized administrators and members according to configured permissions.

14.3 Legal Requirements

We may disclose information when reasonably necessary to comply with applicable law, legal process, court orders, governmental requests, or regulatory requirements.

14.4 Security and Protection

We may disclose information when reasonably necessary to detect, prevent, investigate, or address fraud, security incidents, abuse, illegal activity, or threats to users or our services.

14.5 Business Transfers

If Expenu or substantially all of its assets are involved in a merger, acquisition, financing, restructuring, sale, or similar transaction, information may be transferred as part of that transaction subject to applicable law.

15. Service Providers

Expenu may use third-party infrastructure and service providers to operate parts of the platform.

Depending on the functionality and configuration in use, these may include providers for:

Cloud infrastructure and hosting
Database infrastructure
Object/file storage
Email delivery
SMS or messaging
Payment processing
AI processing
Security and monitoring
Application distribution

Third-party providers process information according to their own terms and privacy policies as applicable.

We aim to use providers appropriate to the service being delivered and to apply contractual and technical controls appropriate to the processing involved.

16. Payments and Billing

If you purchase a paid Expenu service, payment processing may be handled by a third-party payment provider.

Payment-card information may be collected and processed directly by the relevant payment provider rather than stored by Expenu in full.

Expenu may receive limited payment-related information such as:

Payment status
Transaction reference
Subscription information
Billing amount
Currency
Payment method metadata

The actual processing of payment credentials is subject to the applicable payment provider's terms and privacy practices.

17. Security

We use technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

Security measures may include:

Encrypted connections using HTTPS/TLS
Authentication and authorization controls
Role-based access controls
Workspace-level access restrictions
Server-side authorization checks
Session and authentication protections
Security and audit logging
Secure password handling
Encryption of certain sensitive information where applicable
File validation and security controls
Infrastructure monitoring
Backup and recovery procedures

No internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for notifying us if you believe your account has been compromised.

18. Data Retention

We retain information for as long as reasonably necessary to:

Provide the service
Maintain your account
Maintain financial records you request us to store
Provide support
Meet legal, tax, accounting, or regulatory requirements
Resolve disputes
Enforce agreements
Prevent fraud and abuse
Maintain security and audit records

Retention periods vary depending on the type of information, purpose, legal requirements, and whether the information remains necessary to provide the service.

19. Data Deletion

You may request deletion of your account or personal information by contacting us, subject to applicable law and legitimate retention requirements.

When an account or workspace is deleted, information may be deleted, anonymized, or retained for a limited period where necessary for security, legal compliance, dispute resolution, accounting, fraud prevention, backups, or other legitimate purposes.

Information stored in backups may remain temporarily until the applicable backup lifecycle expires.

Deleting your account may not delete information that other users or workspace administrators are legally entitled to retain or that must be retained by law.

20. Your Privacy Rights

Depending on where you live and which privacy laws apply, you may have rights relating to your personal information, including:

Right to access personal information
Right to correct inaccurate information
Right to request deletion
Right to restrict certain processing
Right to object to certain processing
Right to data portability where applicable
Right to withdraw consent where processing relies on consent
Right to lodge a complaint with an applicable authority

These rights may be subject to legal limitations and exceptions.

To submit a privacy request, contact:

[email protected]

We may need to verify your identity before fulfilling certain requests in order to protect your information.

21. International Data Transfers

Expenu and its service providers may process information in countries other than the country where you live.

Where information is transferred internationally, we take reasonable steps to ensure that the transfer and processing are conducted in accordance with applicable privacy and data-protection requirements.

Depending on applicable law, international transfers may rely on contractual safeguards, adequacy decisions, consent, or another legally recognized transfer mechanism.

22. Children's Privacy

Expenu is not intended for children who are below the minimum age required to independently use the service under applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided personal information to us without appropriate authorization, please contact us so that we can investigate and take appropriate action.

23. Third-Party Services and Links

Expenu may contain links to websites, applications, services, or integrations operated by third parties.

We are not responsible for the privacy practices of third-party services that we do not control.

You should review the privacy policy of each third-party service before providing information to it.

24. Marketing Communications

Where permitted by applicable law, we may send information about Expenu products, features, updates, or services.

You may opt out of promotional communications by using the unsubscribe mechanism provided in the communication or by contacting us.

Opting out of marketing communications does not prevent us from sending essential service, security, account, or transactional communications.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Expenu, applicable law, technology, security practices, or our data-processing activities.

When we make changes, we will update the "Last Updated" date at the beginning of this policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

26. Contact Us

If you have questions, concerns, requests, or complaints about this Privacy Policy or the way Expenu handles personal information, contact us.

9VN Communication Pvt Ltd

SCR 201, 3rd Floor,
150 Meters from Venus Inn Restaurant,
Towards Mausima Flyover,
Bapuji Nagar,
Bhubaneswar, Odisha 751009,
India.

Email: [email protected]

Phone: +91 7894666662

Website: https://expenu.com

Expenu is a product operated by 9VN Communication Pvt Ltd.