Expense data deserves proper care.

Authentication

Sign in with a password. A new one arrives by email.

• Sign-in is run by Clerk, a specialist identity provider.
• You sign in with a password.
• If you have no password, or you have forgotten it, we email you a code so you can choose a new one.
• Signing out ends the session on that device.

Access controls

People see what their role allows, and no more.

• Each person sees their own expenses. Managers see their team’s.
• An accountant sees a client only while that client shares with their practice, and the client can stop sharing at any time.
• A read-only link for an auditor covers one client and one period, expires, and can be revoked.

Encryption

Connections to ClaimSnappy are encrypted.

• The website and the iPhone app talk to ClaimSnappy over HTTPS.

Details to followHow stored data and receipt files are encrypted at rest.

Data storage

Where your expenses and receipt photos live.

• Account data sits in a PostgreSQL database, and receipt files on disk, with our hosting provider Railway in the United States.
• Receipt photos are sent to OpenAI to be read. We don’t use your receipts to train models of our own.

Backups

How we protect against losing data.

Details to followOur backup schedule and how restores are tested.

Data deletion

Your data, on your terms.

• Delete a single receipt, trip or claim pack whenever you like.
• Delete your account from Settings → You. On a personal account that removes your records and files.
• Business records are kept for six years from the record date, unless the business sets a different period.

Privacy

No advertising, no tracking.

• We don’t use advertising or analytics cookies.
• Download a copy of your data from Settings → You at any time.
• Our privacy notice lists every supplier that handles your data and where they are.