Privacy Policy

Last updated: 9 October 2026

This policy explains what personal data HRExpenso handles, why, and what you can ask us to do with it. It covers this website and the HRExpenso service.

This website

When you ask for a demo we collect your name, work email, company, company size and anything you write in the message. We use it only to reply to you and to arrange and follow up the demo. We don't sell it, and we don't add you to a mailing list.

The website doesn't use advertising or tracking cookies. Our hosting provider keeps short-lived technical logs (such as IP addresses) to keep the site secure.

The HRExpenso service

When a company uses HRExpenso, it decides what employee data is stored (for example names, employee IDs, work emails, job details, expense claims and receipts). HRExpenso processes that data on the company's behalf and only to provide the service, under the agreement we have with that company. Employees with questions about their data should first contact their employer's HR team.

Where data is kept

• Application data: Supabase, in Mumbai, India, unless a customer's agreement says otherwise.
• Website and application pages: Cloudflare.
• Email we send: our email provider, only to deliver the message.

Each customer's data is kept separate from every other customer's, and access is limited by role.

How long we keep it

Demo requests: up to two years after our last contact, unless you ask us to delete them sooner. Service data: for as long as the customer's agreement requires, then deleted or returned.

Your rights

You can ask to see, correct or delete the personal data we hold about you, or withdraw your consent, under India's Digital Personal Data Protection Act, 2023 and other laws that apply to you. Write to info@hrexpenso.com and we'll reply within 30 days.

Changes

If this policy changes, we'll update the date at the top of this page.