Privacy Policy

Account Information

When you create an account, we collect your name, email address, password (stored in hashed form), company name, and role within your organization.

Expense Data

We collect expense-related information you provide, including receipt images, expense amounts, vendor names, dates, categories, and any notes or descriptions you add.

Uploaded Files

Receipt images and PDFs you upload are stored securely for processing and retrieval. These files are associated with your company account and are not shared across organizations.

Usage Data

We collect basic usage information such as login activity, features used, and actions performed within the Service to improve our product and support troubleshooting.

• Service Delivery: To provide expense management features, including receipt processing, report generation, and team collaboration.
• AI Processing: To extract data from uploaded receipts using artificial intelligence. Receipt content is sent to our AI provider for processing and is not used to train AI models.
• Communication: To send transactional emails such as report status updates, team invitations, and password reset requests.
• Currency Conversion: To convert expense amounts between currencies using real-time exchange rate data.
• Improvement: To analyze usage patterns and improve the Service.

When you upload a receipt, the image or PDF is sent to our AI provider (Anthropic) for data extraction. The AI analyzes the document to identify vendor name, amount, date, tax, and other fields. This processing is done solely to provide the extraction service. Your receipt data is not used to train or improve AI models.

Your data is stored in encrypted PostgreSQL databases hosted on secure cloud infrastructure. Uploaded files are stored on secure server volumes with path-traversal protection. Passwords are hashed using bcrypt with industry-standard cost factors. We implement multi-tenant data isolation to ensure your company’s data is only accessible to authorized members of your organization.

We use the following third-party services to operate BuckOne:

• Anthropic (Claude AI): Receipt data extraction. Receipts are processed per-request and not retained by the AI provider.
• Resend: Transactional email delivery for notifications and invitations.
• Frankfurter API: Real-time currency exchange rate data from the European Central Bank.

We retain your data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

You have the right to:

• Access: Request a copy of your personal data.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your account and associated data.
• Export: Download your expense data and reports.

To exercise these rights, contact us at the email address below.

BuckOne uses minimal cookies necessary for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Session cookies are automatically deleted when you log out or close your browser.

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is only shared with the third-party service providers listed above, solely for the purpose of operating the Service.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new “Last updated” date. Continued use of the Service after changes constitutes acceptance of the updated policy.

For questions about this Privacy Policy or your data, please contact us at support@buckone.app.