Privacy Policy

ExpenseTerminal helps creators, freelancers, contractors, and small businesses organize transaction data, identify potential deductions, prepare tax-ready summaries, manage budgets, and estimate tax set-asides. The Service may process sensitive financial information, so we design our practices around data minimization, access control, and user control.

We collect information you provide directly, information generated through your use of the Service, and information you authorize third parties to provide to us.

Account and profile information

• Name, email address, password credentials or authentication identifiers, business profile details, tax-year settings, notification preferences, and support messages.
• Billing status, subscription plan, invoices, and payment metadata processed through our payment provider. We do not store full payment card numbers on our servers.

Financial and tax workflow information

• CSV, Excel, or other files you upload, including transaction descriptions, vendors, dates, categories, amounts, account labels, notes, deductions, receipts, and tags.
• Financial account information you authorize through Plaid or similar providers, such as account names, account types, balances, transactions, institution identifiers, connection status, and related metadata.
• Outputs and settings generated in the Service, including categories, Schedule C mappings, deduction percentages, audit notes, budgets, income entries, rules, automations, exports, and reports.

Device, usage, and security information

• IP address, browser type, device type, operating system, referring pages, pages viewed, feature usage, timestamps, diagnostics, and log data.
• Cookies, local storage, session identifiers, and similar technologies described in our Cookie Policy.

We use information for the following business and operational purposes:

• Provide, maintain, secure, troubleshoot, and improve the Service.
• Create and manage your account, authenticate sessions, provide support, and send administrative notices.
• Import, normalize, categorize, search, sort, and display transactions and other financial data at your direction.
• Generate deduction suggestions, budget views, exports, tax summaries, quarterly tax set-aside estimates, reminders, and other product features.
• Process payments, manage subscriptions, prevent fraud, enforce our agreements, and comply with legal obligations.
• Develop aggregated or de-identified analytics that do not reasonably identify you.
• Send marketing communications where permitted by law, with the ability to unsubscribe from non-transactional emails.

ExpenseTerminal may use artificial intelligence and automated rules to classify transactions, suggest Schedule C categories, create audit-friendly explanations, identify possible deductions, and summarize tax or budget information. These outputs are generated from the data you provide or authorize us to access.

To provide these features, we may send limited transaction data, labels, notes, and related context to contracted AI infrastructure providers. We use these providers only to deliver and improve the Service under their applicable data protection terms and our instructions.

AI outputs can be incomplete or incorrect. You are responsible for reviewing all categories, deduction percentages, estimates, exports, and reports before relying on them or sharing them with a tax professional.

We share information only as needed to provide the Service, operate our business, comply with law, or protect rights and safety.

• Service providers: Hosting, database, authentication, storage, email delivery, analytics, security, error monitoring, AI processing, customer support, and operational vendors.
• Financial connection providers: Plaid or similar providers when you choose to connect financial accounts. Their services are governed by their own terms and privacy notices.
• Payment processors: Stripe or similar processors for checkout, billing, tax, fraud prevention, and subscription management.
• Professional advisers: Lawyers, accountants, insurers, auditors, and other advisers under duties of confidentiality.
• Legal and safety disclosures: Courts, regulators, law enforcement, or other parties when we believe disclosure is required by law or necessary to protect users, the Service, or our legal rights.
• Business transfers: A buyer, successor, or affiliate in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets.

If you connect a bank, card, or other financial account, you authorize ExpenseTerminal and the applicable financial data provider to access and process information from that account to provide the Service. You may disconnect accounts through the Service where available or by contacting us.

We do not receive your online banking password from Plaid. We may store encrypted access tokens or related identifiers that allow the Service to refresh data you have authorized. Plaid and your financial institution may independently process your information under their own agreements.

We use cookies and similar technologies for authentication, security, preferences, product functionality, analytics, diagnostics, and payment or financial connection flows. Please review our Cookie Policy for more detail.

Browser controls may let you block or delete cookies. Blocking necessary cookies may prevent the Service from working. We do not use cookies to sell your financial data or serve third-party behavioral advertising based on your transaction history.

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, access controls, credential protections, vendor review, logging, backups, and encryption for sensitive tokens where appropriate.

No internet service can guarantee perfect security. You are responsible for using a strong password, protecting your devices, keeping your login credentials confidential, and promptly notifying us of suspected unauthorized account access.

We keep information for as long as reasonably necessary to provide the Service, maintain business records, comply with law, resolve disputes, enforce agreements, prevent fraud, and maintain backups. Retention periods vary depending on the type of data and the reason we hold it.

• Account and billing records may be retained while your account is active and for a reasonable period afterward for legal, tax, accounting, and dispute purposes.
• Uploaded files, transactions, rules, budgets, reports, and connected-account data are retained while needed to provide the Service or until deleted, subject to backups and legal requirements.
• Security logs and diagnostic data may be retained to protect the Service and investigate abuse.

If you request account deletion, we will delete or de-identify personal information unless retention is reasonably necessary or legally required. Backup copies may persist for a limited period before being overwritten.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also withdraw consent where processing is based on consent and opt out of certain communications.

To exercise privacy rights, contact us at expenseterminal@outlook.com. We may need to verify your identity and authority before completing a request. We will not discriminate against you for exercising rights provided by applicable law.

California residents may have rights under the CCPA/CPRA, including the rights to know, delete, correct, limit certain uses of sensitive personal information, and opt out of sale or sharing. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

ExpenseTerminal is operated from the United States. If you access the Service from outside the United States, your information may be processed in the United States and other countries where our providers operate. These locations may have data protection laws different from those in your jurisdiction.

Where required, we rely on appropriate safeguards for international transfers, such as standard contractual clauses or other lawful transfer mechanisms.

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service, by email, or as otherwise required by law. The effective date above indicates when this policy was last revised.

Questions, requests, and privacy notices may be sent to:

Last updated: June 23, 2026