1<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> 2<html xmlns="http://www.w3.org/1999/xhtml"> 3 <head> 4 <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> 5 <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> 6 <meta name="viewport" content="width=device-width"> 7 <!--[if lte IE 9]> 8
8<script type="text/javascript"> 9 var sPath = window.location.pathname; 10 var sPage = sPath.substring(sPath.lastIndexOf('/') + 1); 11 if (sPage != "browserupgrade") 12 window.location="browserupgrade"; 13 </script>
13 14 <![endif]--> 15 <title>Expensify - Privacy Policy</title> 16 <link rel="icon" type="image/png" href="https://d2k5nsl2zxldvw.cloudfront.net/images/expensify__favicon.png"> 17 18 19 <meta name="description" content=""/> 20 <meta name="robots" Content="Index,Follow" /> 21 22 23 <link rel="stylesheet" type="text/css" href="https://d2k5nsl2zxldvw.cloudfront.net/dist/css-gz/style.da2bc6c8.css.gz" /> 24 25 26 27
27<script>!function(){window.semaphore=window.semaphore||[],window.ketch=function(){window.semaphore.push(arguments)};var e=document.createElement("script");e.type="text/javascript",e.src="https://global.ketchcdn.com/web/v3/config/expensify/website_smart_tag/boot.js",e.defer=e.async=!0,document.getElementsByTagName("head")[0].appendChild(e)}();</script>
27 28
28<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-gib.1749b063.js.gz"></script>
28 29 </head> 30 <body id="terms" class="year2026 month09 day24 week39 Thursday ofh has-tertiary-nav"> 31 32 <!-- Checkbox to show menu --> 33<input type="checkbox" id="menu-toggle" /> 34<div class="sidepane sidepane--guest production"> 35 <div class="sidepane__logo"> 36 <a href="/signout?clean=true"> 37 <h1 class="">Expensify</h1> 38 </a> 39</div> 40 41<div class="sidepane__nav"> 42 <ul role="navigation"> 43 <li> 44 <a href="/signin"> 45 <span class="expensicons expensicons-switch"></span>Sign In 46 </a> 47 </li> 48 <li> 49 <a href="/signup"> 50 <span class="expensicons expensicons-user-add"></span>Sign Up 51 </a> 52 </li> 53 </ul> 54</div> 55 </div> 56 57<!-- Menu icon for smaller screen sizes --> 58 <label for="menu-toggle" class="menu-icon"> 59 <span></span> 60</label> 61 62 <!-- App content overlay (only visible when sidepane is expanded) --> 63<label for="menu-toggle" class="sidepane-overlay"></label> 64 <div class="app-content-wrapper"> 65 <div id="sideNav_wrapper"> 66 <div id="sideNav"> 67 <div class="tertiary-nav"> 68 <ul role="navigation"> 69 <li class="nav-group has-current"> 70 <button class="nav-group__toggle" aria-expanded="false">Platform Terms</button> 71 <ul class="nav-group__items"> 72 <li><a href="/terms" >Terms of Service</a></li> 73 <li><a href="/privacy" class="current" aria-current="page">Privacy Policy</a></li> 74 </ul> 75 </li> 76 <li class="nav-group"> 77 <button class="nav-group__toggle" aria-expanded="false">Product Terms</button> 78 <ul class="nav-group__items"> 79 <li><a href="/travelterms" >Travel Terms</a></li> 80 <li><a href="/karmaprogramterms" >Karma Program Terms</a></li> 81 <li><a href="/payrollterms" >Payroll Terms</a></li> 82 <li><a href="/expensify-payments-wallet-terms-of-service" >Expensify Payments - Expensify Wallet Terms</a></li> 83 <li><a href="/bancorp-bank-wallet-terms-of-service" >The Bancorp Bank, N.A. - Expensify Wallet Terms</a></li> 84 </ul> 85 </li> 86 <li class="nav-group"> 87 <button class="nav-group__toggle" aria-expanded="false">US Card Agreements</button> 88 <ul class="nav-group__items"> 89 <li><a href="/commercialcardprogramterms" >Expensify Visa® Commercial Card Program Terms</a></li> 90 <li><a href="/commercialcardagreement" >Expensify Visa® Commercial Card Agreement</a></li> 91 <li><a href="/corporatecardprogramterms" >Corporate Card Program Terms</a></li> 92 <li><a href="/expensifycardagreement" >Card Agreement</a></li> 93 </ul> 94 </li> 95 <li class="nav-group"> 96 <button class="nav-group__toggle" aria-expanded="false">UK and EU Card Agreements</button> 97 <ul class="nav-group__items"> 98 <li><a href="/eeacardagreement" >Expensify EEA Card Agreement</a></li> 99 <li><a href="/ukcardagreement" >Expensify UK Card Agreement</a></li> 100 <li><a href="/ukeeacommercialcardprogramterms" >Expensify Visa® Commercial Card Program Terms (UK/EEA)</a></li> 101 <li><a href="/tplprivacy" >TPL Privacy Policy</a></li> 102 <li><a href="/tpmlprivacy" >TPML Privacy Policy</a></li> 103 </ul> 104 </li> 105 <li class="nav-group"> 106 <button class="nav-group__toggle" aria-expanded="false">Additional Terms</button> 107 <ul class="nav-group__items"> 108 <li><a href="/paymentsentities" >Payments Entities</a></li> 109 <li><a href="/achterms" >ACH Terms</a></li> 110 <li><a href="/esignagreement" >Agreement to Receive Electronic Communications</a></li> 111 </ul> 112 </li> 113 </ul> 114 </div> 115 </div> 116 </div> 117 <div class="app-content"> 118 <div id="content_wrapper" role="main"> 119 <div class="page-header"> 120 <h1>Terms & Conditions</h1> 121 </div> 122 <div id="terms-header"> 123 <h2>Privacy Policy</h2> 124 <p class="last-updated">Last updated: April 1, 2026</p> 125 </div> 126 127<div> 128 <p>At Expensify, Inc. ("<strong>Expensify</strong>", "<strong>we</strong>", "<strong>us</strong>", or 129 "<strong>our</strong>", which include our group and affiliated companies, including, without limitation, 130 Expensify Payments LLC, Expensify Limited, Expensify Australia Pty Ltd, and Expensify Canada Inc., which such 131 entities collect information from users from particular jurisdictions), our most important asset is our 132 relationship with our user community. We are committed to maintaining the confidentiality, integrity and 133 security of information about our users and their organizations. This privacy policy ("<strong>Privacy 134 Policy</strong>" or "<strong>Policy</strong>
134") describes how we collect, use, disclose, share and secure the 135 personal and company information you provide when you use our expense management, invoicing or bill processing 136 software, through our mobile application (the "<strong>Application</strong>") or visit the Expensify websites <a 137 href="https://www.expensify.com/">www.expensify.com</a> or <a target="_blank" rel="noopener noreferrer" 138 href="https://use.expensify.com/">use.expensify.com</a> or <a target="_blank" rel="noopener noreferrer" 139 href="https://new.expensify.com/">new.expensify.com</a> (collectively, the "<strong>Site</strong>" and, 140 together with any related software, tools and services provided in connection with the Application or the Site, 141 the "Expensify Service"). It also describes your choices regarding the use, access and correction of your 142 Personal Data (as defined in Section 3 of this Privacy Policy) and how to contact us if you have any further 143 queries or complaints about our management of your personal information. </p> 144 <p>In this Privacy Policy, "<strong>you</strong>" and "<strong>your</strong>" refers to individual users of the 145 Expensify Service, as well as to Members and Corporate Members. "<strong>Members,</strong>" "<strong>Corporate 146 Members,</strong>" and other capitalized terms not defined in this privacy policy are defined in the 147 Expensify Terms of Service.</p> 148 <p> We process your Personal Data as set out in the Privacy Policy which you should read.</p> 149 <p> Please review the Jurisdiction-specific provisions below for more information if you are visiting from Europe, 150 Australia, California, Colorado, Connecticut, Nevada, Utah, or Virginia.</p> 151 <h3>1. Member Acknowledgment</h3> 152 <p>By submitting or making available Personal Data (as defined below) through the Expensify Service, you confirm 153 that you have read and acknowledged the terms of this Privacy Policy and you understand our practices around the 154 collection, storage, use and disclosure of your Personal Data in accordance with this Privacy Policy.</p> 155 <h3>2. A Note About Children</h3> 156 <p>We do not intentionally gather Personal Data about individuals who are under the age of 18. If you become aware 157 that we inadvertently hold or have access to Personal Data about anyone under 18, please let us know so we can 158 delete it.</p> 159 <h3>3. Types of Personal Data We Collect and How It Is Collected</h3> 160 <p>Personal information or "<strong>Personal Data</strong>", means any information about an individual from which 161 that person can be identified, or which when combined with other information which is in the possession of, or 162 is likely to come into the possession of, Expensify could be used to identify that person. If you are accessing 163 the Expensify Service from Australia, "<strong>Personal Data</strong>" also includes any information or opinion, 164 whether true or not and whether recorded in material form or not, by which you may be reasonably identifiable. 165 Expensify will not use your Personal Data except as set forth in this Privacy Policy and in the Terms of 166 Service. </p> 167 <p>We may collect (both directly and indirectly), use, store and transfer different kinds of personal data about 168 you. For specific details about how Expensify does this with cookies, identifiers and other tracking 169 technologies please review the Expensify Cookie Policy below. The categories of Personal Data we collect, use, 170 store and transfer have been grouped together as follows:</p> 171 <ul class="styled marginLeft30"> 172 <li> 173 <p><strong>Registration Data.</strong> When you purchase or register for our Services or sign up for our 174 Corporate Card Program or create an Expensify account, we collect directly from you (or for certain 175 corporate accounts, from your employers) Personal Data, including your name, date of birth, billing and 176 mailing address, email, professional title, company name, phone numbers, credit card, other payment
177 information, and password and/or other sign-on mechanism. In addition, we (or our third-party credit 178 card or payment processor on our behalf) will collect Personal Data including your credit card number or 179 account information when you upgrade to a paid account or use a feature or function in the Expensify 180 Service that requires payment, such as accessing a Workspace. </p> 181 </li> 182 <li> 183 <p><strong>Transaction Data that Allows Us to Provide our Services to You.</strong> This includes current 184 and historical financial information, such as bank account, payment card and other payment account, 185 contact information (billing and mailing address, email address, and phone numbers), expense data, 186 receipts, transaction data imported from third party financial service companies, and other details 187 about reimbursements and payments to and from you and other details of products and services you have 188 purchased from us. If you participate in the Corporate Karma Program and/or 189 Personal Karma Program (each subject to the <a href="/karmaprogramterms">Karma 190 Program Terms</a>), we may collect Personal Data including your name, contact information, and 191 donation amount(s), and share this information with <a target="_blank" rel="noopener noreferrer" 192 href="https://expensify.org/">Expensify.org</a>, a California nonprofit 193 public benefit corporation 194 and a charitable affiliate of Expensify. Visit Expensify.org for more details. If you inquire about or 195 participate in the Payroll Service (subject to the Payroll Terms), we may collect or receive from you, 196 your employer, or your employer's Corporate Administrator, your Personal Data including financial 197 information (such as bank account and routing number, bank account balance and transaction information); 198 identification information (such as your name, mailing address, email address, phone number, birthdate, 199 social security number, taxpayer identification number, and government-issued documentation, such as a 200 driver's license or passport); and taxpayer information (such as your Federal Employer Identification 201 Number and tax withholding selections, including the number of dependents you have, jobs you've worked 202 in a year, and your tax filing status). We collect your location-based information for the purpose of 203 mileage tracking, providing location specific features, and to confirm your Expensify cardholder status 204 for specific events associated with the services. We may share your geo-location data with third parties 205 for the sole purpose of providing these services. If you do not wish to allow us to collect and/or share 206 your information in this manner please opt out by contacting us at <a 207 href="mailto:[email protected]">[email protected]</a>. </p> 208 </li> 209 <li> 210 <p><strong>Technical Data.</strong> The Expensify Service (which may be hosted by a third-party service 211 provider) collects Personal Data from you, such as browser type, your approximate geographic location of 212 your mobile device or computer (from your Internet Protocol (IP) address), operating system and version, 213 Internet Protocol (IP) address, domain name, information about your application, operating environment 214 and hardware profiles and/or a date/time stamp for your visit. We may also use Identifiers (as defined 215 below) and navigational data like Uniform Resource Locators (URL) to gather information regarding the 216 date and time of your visit and/or access to the Expensify Service and your activity on the Site and the 217 Application. Like most internet services, we automatically gather this Personal Data and store it in log 218 files each time you visit the Site, use the Application or access your account on our network. We use 219 mobile analytics software to allow us to better understand the functionality of our Mobile Software on 220 your phone. This software may record information such as how often you use the Application, the events 221 that occur within the Application, aggregated usage, performance data, and where the Application was 222 downloaded from. We do not link the information we store within the analytics software to any Personal 223 Data you submit within the mobile Application. </p> 224 </li> 225 <li> 226 <p><strong>Information about your Interactions with Expensify.</strong> We collect information about your 227 interactions with Expensify, which may include your use of our products, services, websites or apps, 228 including information collected using Cookies and other technologies (for further information on how we 229 use Cookies and the information we collect using Cookies, see our cookies policy in Section 5 below). It
230 may also include communications with us, such as if you contact our customer service centers, including 231 recording calls and the contents of your device screen (by Expensify itself or using a third-party 232 service) for quality and training purposes. This may also include data about your participation in 233 promotions or programs. This may also include data about how you exercise rights or preferences 234 regarding your data. We also retain information on your behalf, such as the Personal Data described 235 above and any correspondence. If you provide us feedback or contact us via email, we will collect your 236 name and email address, IP address, as well as any other content included in the email, in order to send 237 you a reply, and any information that you submit to us, such as a resume. If we conduct a survey in 238 which you participate, we may collect additional profile information. We may also collect Personal Data 239 at other instances in the Site or Application user experience where we state that Personal Data is being 240 collected. </p> 241 </li> 242 <li> 243 <p><strong>Other Self-Reported Information.</strong> You have the option to provide us with additional 244 information about yourself and others through surveys, forms, features and applications. Where such 245 information is not required by Expensify for the purposes of providing the services to you, you 246 acknowledge that Expensify may store, use and disclose such Personal Data in accordance with this 247 Privacy Policy. </p> 248 </li> 249 <li> 250 <p><strong>Member-Generated Content.</strong> Some of our Services allow you to create and post or upload 251 content, such as data, text, SMS, software, music, audio, photographs, graphics, video, messages, or 252 other materials that you create or provide to us or to other Members or Non-Members through either a 253 public or private transmission. For example, Member-Generated Content includes any discussions, posts, 254 or messages you send on our Forums, as well as messages or SMS you send using Expensify Chat. Our Site 255 offers publicly accessible blogs or community forums. You should be aware that any information you 256 provide in these areas may be read, collected, and used by others who access them, as well as by our 257 third party service providers such as OpenAI, L.L.C., to ensure compliance with our Acceptable Use 258 Policy and Content Standards through our Enforcement Policy, or third-party suppliers such as Spotnana 259 Technology, Inc.. </p> 260 </li> 261 <li> 262 <p><strong>Referral Information and Sharing.</strong> When you refer a person to Expensify, we will ask for 263 that person's name, phone number and/or email address and collect this information directly from you. By 264 participating in a referral program or by choosing to share information with another person, you confirm 265 that the person has given you permission for Expensify to communicate with him or her. If you choose to 266 use our referral service to tell a friend about Expensify, or if, as a Corporate Administrator, you 267 refer an employee or other authorized service provider to connect with your Workspace (each such 268 individual, a "<strong>Referred Party</strong>"), you must seek permission of the Referred Party so that 269 Expensify may use their name, phone number and/or email address to contact them about the Expensify 270 Service. By providing us with the Referred Party's name and email address, you warrant that the Referred 271 Party agrees to such contact. We will automatically send your friend a one-time email or SMS message 272 inviting him or her to visit the site. If you were referred by a friend or a Corporate Administrator, 273 and you activate an Account, Expensify shall treat such Personal Data as if you had directly provided it 274 to Expensify, which such Personal Data will be processed as set forth in this Privacy Policy. If your 275 friend is a resident of the European Economic Area, the United Kingdom or Australia, please make sure 276 they are happy to be contacted by us. </p> 277 </li> 278 <li> 279 <p><strong>Social Media Features and Widgets.</strong> Our Site includes Social Media Features, such as the 280 Facebook "<strong>Like</strong>" button and Widgets ("<strong>Features</strong>"). These Features may 281 collect your IP address, which page you are visiting on our site, and may set a cookie to enable the 282 Feature to function properly. They may also allow third party social media services to provide us 283 information about you, including your name, email address, and other contact information. The
284 information we receive is dependent upon your privacy settings with the third-party social media 285 service. Features are either hosted by a third party or hosted directly on our site. Your interactions 286 with these Features are governed by the privacy statements of the third-party companies providing them. 287 You should always review and, if necessary, adjust your privacy settings on third party websites and 288 services before linking or connecting them to our website or Service.</p> 289 </li> 290 <li> 291 <p><strong>Third-Party Data.</strong> We will collect your Personal Data from you unless it is unreasonable 292 or impracticable to do so. However, we may collect, receive, and retain Personal Data about you from the 293 following non-publicly accessible sources: (i) companies that distribute the Expensify Service by way of 294 a co-branded or private-labeled website, (ii) companies that offer their products and/or services via 295 the Expensify Service, (iii) companies affiliated with Expensify, such as Expensify.org, (iv) companies 296 that provide services (such as payment processing and account linking services) in connection with the 297 Expensify Service, 298 including without limitation Issuers and Card Networks (as such terms are defined in the <a 299 href="/corporatecardprogramterms">Corporate Card Program Terms</a>); or 300 (iv) financial institutions or credit bureaus (collectively, "<strong>Partner Companies</strong>"). Our 301 Partner Companies may supply us with Personal Data, such as your name and email and mailing address, 302 bank account, credit, or financial information or your login credentials for such Partner Company's 303 website or service, in order to help us establish the account or fulfil our obligations to you. We may 304 also collect your Personal Data if necessary from public sources (such as LinkedIn, Corporate 305 Subscribers Websites, Clearbit, Lexis Nexus). We may add this information to the information we have 306 already collected from you via our Site or Application in order to perform and improve the Expensify 307 Service. If you provide us Personal Data about others, or if others give us your information, we will 308 only use that information for the specific reason for which it was provided to us.</p> 309 <p>In order to connect a Linked Financial Account which is in the UK to the Expensify Service, we are an 310 agent of Plaid Financial Ltd., an authorized payment institution regulated by the Financial Conduct 311 Authority under the Payment Services Regulations 2017 (Firm Reference Number: 804718). Plaid provides 312 you with regulated account information services through Expensify as its agent. You acknowledge and 313 authorize us to analyze information from your Linked Financial Account.</p> 314 </li> 315 </ul> 316 <p>We also collect, use, and share aggregated or de-identified data, such as statistical or demographic data. This 317 information has either been de-identified or otherwise combined with that of other users and analyzed or 318 evaluated as a whole, such that no specific individual may be identified. We may use aggregated or de-identified 319 data for purposes such as research and marketing purposes and may also share such data with any third parties, 320 including advertisers, promotional partners, sponsors, event promoters, and/or others.</p> 321 <p>We do not collect any "<strong>Special Categories of Personal Data</strong>" about you (this includes details 322 about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political 323 opinions, trade union membership, information about your health, and genetic and biometric data) nor do we 324 collect any information about criminal convictions and offenses.</p> 325 <h3>4. Third-Party Links</h3> 326 <p>This Privacy Policy applies only to the use and disclosure of Personal Data that we collect while you use the 327 Expensify Service. Our provision of a link to any other website or location is for your convenience and does not 328 signify our endorsement of such other website or location or its contents. When you click on such a link, you 329 will leave the Expensify Service and go to another site. During this process, a third party may collect Personal 330 Data from you. We have no control over, do not review, do not endorse, and cannot be responsible for, these 331 outside websites or their content. Please be aware that the terms of this Privacy Policy do not apply to these 332 outside websites or content, or to any collection of data after you click on a link to a third party. If you 333 submit Personal Data to any of those sites, your information is governed by their privacy policies. We encourage 334 you to carefully read the privacy policy of any website you visit.</p> 335 <h3>5. Expensify Cookie Policy and Use of Tracking Technologies</h3> 336 <p>When you interact with the Site or the Application, we try to make that experience simple and useful. We and our 337 partners use industry standard identifiers, such as cookies or other similar technologies. We will generally 338 refer to cookies, web beacons, flash cookies, and pixels collectively as "<strong>cookies</strong>", 339 "<strong>tracking technology</strong>" or "<strong>identifiers</strong>" in this policy. By using our Services, 340 you are agreeing that we can use cookies and other tracking technologies described
340in this Cookie Policy. </p> 341 <h4>5.1 What are cookies and how long are they stored?</h4> 342 <p>Cookies are small pieces of information which are issued to your computer or mobile device (as the case may be) 343 when you visit a website or access or use a mobile application and which store and sometimes track information 344 about your use of the Site or Application (as the case may be). A number of cookies we use last only for the 345 duration of your web or Application session and expire when you close your browser or exit the Application 346 (known as "session cookies). Other cookies are used to remember you when you return to the Site or Application 347 and will last for longer (known as persistent cookies). A persistent cookie lasts until you or your browser 348 deletes the cookies or they expire. </p> 349 <p>Cookies set by us are called "<strong>first party cookies</strong>", while cookies set by parties other than 350 Expensify are called "<strong>third party cookies</strong>". The parties that set third party cookies can 351 recognize your device, both when you use the Services and when you use other websites or mobile apps. You should 352 check the third party's website for more information about how they use cookies and other tracking technologies. 353 Both first party and third party cookies can serve a number of different functions, such as analytics, marketing 354 and advertising. </p> 355 <h4>5.2 What other similar tracking technologies does Expensify use?</h4> 356 <ul class="styled marginLeft30"> 357 <li> 358 <p><strong>Web Beacons:</strong> In addition to cookies, web beacons may be set by us or third parties in 359 respect of your use of the Site or Application. Web beacons are small image files within the content of 360 the Site or Application for analytics purposes so we or third parties can understand which parts of the 361 Site or Application are visited and which functions of the Site or Application are used and whether 362 particular content is of interest.</p> 363 </li> 364 <li> 365 <p><strong>Flash cookies:</strong> We may also use so-called "<strong>flash cookies</strong>" (also known as 366 "<strong>Local Shared Objects</strong>" or "<strong>LSOs</strong>") to collect and store information 367 about your use of our Services.</p> 368 </li> 369 <li> 370 <p><strong>Mobile Device Identifiers:</strong> We also use mobile device identifiers which perform a similar 371 role, like the IDFA used by Apple devices and the UDID used by Android devices.</p> 372 </li> 373 </ul> 374 <h4>5.3 How do we use cookies? </h4> 375 <p>We use cookies to provide our Site, gather information about your usage patterns when you navigate the Sites in 376 order to enhance your personalized experience, and to understand usage patterns to improve our Sites, products, 377 and services. We also allow certain third parties to place cookies on our Site in order to collect information 378 about your online activities on our Sites over time and across different websites you visit. This information is 379 used to provide advertising tailored to your interests on websites you visit, also known as interest based 380 advertising, and to analyze the effectiveness of such advertising. </p> 381 <p>Usage information may be linked to your account in order to assist Expensify to provide services to your account, 382 for example analyzing data for the purposes of trouble shooting. Expensify will not sell or disclose usage data 383 to any third party unless such usage data has been aggregated or de-identified. </p> 384 <p>Cookies on our Sites are generally divided into the following categories:</p> 385 <ul class="styled marginLeft30"> 386 <li> 387 <p><strong>Strictly necessary cookies.</strong> These are cookies that are required for the operation of our 388 website or provide necessary functions relating to the services you request. They include, for example, 389 cookies that enable you to log into secure areas of our website, use a shopping cart or make use of 390 e-billing services. </p> 391 </li> 392 <li> 393 <p><strong>Analytical or performance cookies.</strong> These allow us to recognize and count the number of 394 visitors and to see how visitors move around our website when they are using it. This helps us to 395 improve the way our website works, for example, by ensuring that users are finding what they are looking 396 for easily. These cookies also allow us to collect statistical information about how you use the Site or 397 App (including how long you spend on the Site or Application) and where you have come to the Site or 398 Application from, so that we can improve the Site and learn which parts of the Site and which functions 399 of the Application are most popular with users. </p> 400 </li> 401 <li> 402 <p><strong>Functionality cookies.</strong> These cookies enable helpful but non-essential website functions 403 that improve your website experience. By recognizing you when you return to our website, they may, for 404 example, allow us to personalize our content for you, greet you by name, or remember your preferences 405 (for example, your choice of language or region). This also enables us to customize elements of the 406 promotional layout and/or content of the pages of the Site or Application We also use functional social 407 media plug ins, such as the Facebook "Like" button and Widgets, such as the "Share this" button or 408 interactive mini-programs that run on our site. These Features may collect your IP address, which page 409 you are visiting on our Site, and may set an Identifier to enable the Feature to function properly. 410 Social Media Features and Widgets are either hosted by a third party or hosted directly on our Site. 411 Your interactions with these Features are governed by the Privacy Policy of the company providing it. 412 </p> 413 </li> 414 <li> 415 <p><strong>Targeting cookies.</strong> These cookies enable different advertising related functions. They 416 may allow us to record information about your visit to our website, such as pages visited, links 417 followed, and videos viewed so we can make our website and the advertising displayed on it more relevant
418 to your interests. We may also share this information with third parties for this purpose.</p> 419 </li> 420 </ul> 421 <p> 422 You can find more information about the individual cookies we use, the purpose for which we use them, for how 423 long, and 424 our third-party advertising partners by clicking <a href="#" onclick="ketch('showExperience')">here</a>. 425 </p> 426 <h4>5.4 Your Choices</h4> 427 <h5>5.4.1 Cookies</h5> 428 <p>Most web and mobile device browsers automatically accept cookies but, if you prefer, you can change your browser 429 to prevent that or to notify you each time a cookie is set. Here are links to information from some of the 430 larger browsers about how you can control your browser cookies: <a target="_blank" rel="noopener noreferrer" 431 href="https://support.google.com/chrome/answer/95647?hl=en&p=cpn_cookies">Chrome</a>, <a target="_blank" 432 rel="noopener noreferrer" 433 href="https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies">Firefox</a>, 434 <a target="_blank" rel="noopener noreferrer" 435 href="https://support.apple.com/en-gb/guide/safari/sfri11471/mac">Safari</a>, <a target="_blank" 436 rel="noopener noreferrer" 437 href="https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d">Microsoft 438 Edge</a>. Visit <a target="_blank" rel="noopener noreferrer" href="http://www.allaboutcookies.org/">All 439 About Cookies.org</a> to learn more cookies 440 and how to block cookies using different types of browser or mobile device. Please note, however, that by 441 blocking or deleting cookies used on the Site or Application, you may not be able to take full advantage of the 442 Expensify Service. For website visitors located in the UK or EEA, you may set your cookie preferences by 443 clicking <a href="#" onclick="ketch('showExperience')">here</a>. 444 </p> 445 <h5>5.4.2 Behavioral Advertising</h5> 446 <p>We may partner with a third party to either display advertising on our Site or Application or to manage our 447 advertising on other sites. Our third-party partner may use technologies such as cookies to gather information 448 about your activities on this website and other sites in order to provide you advertising based upon your 449 browsing activities and interests. If you wish to opt -out of interest-based advertising click <a 450 target="_blank" rel="noopener noreferrer" 451 href="https://optout.networkadvertising.org/?c=1">https://optout.networkadvertising.org/?c=1</a> or <a 452 target="_blank" rel="noopener noreferrer" 453 href="https://youradchoices.com/control">https://youradchoices.com/control</a> (or if located in the 454 European Union click Union <a target="_blank" rel="noopener noreferrer" 455 href="https://www.youronlinechoices.eu/">click here</a>). Please note you will continue to receive generic 456 ads. 457 </p> 458 <p>If you would like more information about cookies and targeted advertisements or to opt out of having this 459 information used by companies that are part of the Network Advertising Initiative, please <a target="_blank" 460 rel="noopener noreferrer" href="https://www.networkadvertising.org/choices">click here</a> or the Digital 461 Advertising Alliance, please 462 <a target="_blank" rel="noopener noreferrer" href="https://youradchoices.com/control">click here</a>. For 463 website visitors located in the UK or EEA, you may set your cookie preferences by clicking <a href="#" 464 onclick="ketch('showExperience')">here</a>. 465 </p> 466 <h5>5.4.3 Analytics</h5> 467 <p>We and our vendors (including but not limited to Google Analytics) may use Identifiers and similar tracking 468 technologies to monitor performance and usage on the site for internal analytics and performance monitoring. 469 These Identifiers and similar tracking technologies are used to help the Site collect and store information 470 regarding your visit, such as session state and authentication tokens. Users can control the use of cookies at 471 the individual browser level but if you choose to disable cookies, it may limit your use of certain features or 472 functions provided through the Expensify Service. To manage Flash cookies, please <a target="_blank" 473 rel="noopener noreferrer" 474 href="http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html">click 475 here</a>. </p> 476 <p>To opt out of Google Analytics you can <a target="_blank" rel="noopener noreferrer" 477 href="https://tools.google.com/dlpage/gaoptout/">download a Browser 478 Add-On</a>.</p> 479 <p>The use of Identifiers by our vendors is not covered by our Privacy Policy. We do not have access or control over 480 these cookies.</p> 481 <p>We use mobile analytics software to allow us to better understand the functionality of our Mobile Software on 482 your phone. This software may record information such as how often you use the Application, the events that 483 occur within the Application, aggregated usage, performance data, and where the Application was downloaded from. 484 We do not link the information we store within the analytics software to any personally identifiable information 485 you submit within the mobile Application. </p> 486 487 <p>For website visitors located in the UK or EEA, you may set your cookie preferences by clicking <a href="#" 488 onclick="ketch('showExperience')">here</a>.</p> 489 <h4>5.5 Do Not Track Statement </h4> 490 <p>Some browsers have a "do not track" feature that allows you to tell websites that you do not want to have your 491 online activities tracked. At this time, due to a lack of industry standards, we do not respond to browser "do 492 not track" signals. </p> 493 <h3>6. Use of Your Personal Data</h3> 494 <p>Expensify and our Partner Companies may use your Personal Data in the following ways:</p> 495 <ul class="styled marginLeft30"> 496 <li> 497 <p>to facilitate the creation of and secure your account on our network;</p> 498 </li> 499 <li> 500 <p>identify you as a Member or Non-Member in our system; </p> 501 </li> 502 <li> 503 <p>to administer and provide improved administration of the Expensify Service;</p> 504 </li> 505 <li> 506 <p>to improve the quality of experience when you interact with the Expensify Service, including staff 507 training;</p> 508 </li> 509 <li> 510 <p>
510to send you a welcome email to verify ownership of the email address provided when your account was 511 created;</p> 512 </li> 513 <li> 514 <p>to send you administrative email and/or chat notifications, such as security or support and maintenance 515 advisories;</p> 516 </li> 517 <li> 518 <p>to collect fees and payments owing to us;</p> 519 </li> 520 <li> 521 <p>to respond to your inquiries related to employment opportunities or other requests and to resolve 522 disputes;</p> 523 </li> 524 <li> 525 <p>to provide you with access to and information about customized features, new functionality, and partner 526 integrations;</p> 527 </li> 528 <li> 529 <p>to determine your eligibility to use the various programs part of the Expensify Service;</p> 530 </li> 531 <li> 532 <p>to send promotional communications newsletters, personal interest pieces, interests for the Expensify 533 community, and news about events, elections, and campaigns;</p> 534 </li> 535 <li> 536 <p>to connect Members with each other and volunteers of Expensify.org as part of the Karma Program;</p> 537 </li> 538 <li> 539 <p>to provide you with hardcopy or electronic newsletters, or surveys;</p> 540 </li> 541 <li> 542 <p>to operate our business, including to process payment transactions, manage and enforce contracts with you 543 or with third parties, manage our corporate governance, compliance and auditing practices, and generate 544 anonymized or aggregated data;</p> 545 </li> 546 <li> 547 <p>to send with your consent (or where a friend has referred you to us) upgrades and special offers related 548 to the Expensify Service and for other marketing purposes of Expensify or our Partner Companies;</p> 549 </li> 550 <li> 551 <p>to prevent and identify fraud and other illegal activity including but not limited to making telephone 552 calls to you, from time to time, as a part of secondary fraud protection or to solicit your feedback; 553 </p> 554 </li> 555 <li> 556 <p>to verify your identity as part of compliance with requirements of Partner Companies or applicable 557 regulations; </p> 558 </li> 559 <li> 560 <p>to resolve disputes and protect the rights of Members and third parties;</p> 561 </li> 562 <li> 563 <p>to respond to claims and legal process (such as subpoenas and court orders);</p> 564 </li> 565 <li> 566 <p>to monitor and enforce compliance with the applicable Terms of Service;</p> 567 </li> 568 <li> 569 <p>to prevent or stop any activity that may be illegal, unethical, or legally actionable;</p> 570 </li> 571 <li> 572 <p>to compare information provided by you for accuracy and verification with third parties; </p> 573 </li> 574 <li> 575 <p>to provide you with support and to respond to your inquiries, including to investigate and address your 576 concerns and monitor and improve our responses and responding to consumer rights requests;</p> 577 </li> 578 <li> 579 <p>with respect to Bancorp, as set forth in the Bancorp Privacy Notice below;</p> 580 </li> 581 <li> 582 <p>as otherwise described to you when collecting your personal information; directed by you; needed to 583 comply with laws; and</p> 584 </li> 585 <li> 586 <p>to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale 587 or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, 588 liquidation, or similar proceeding, in which personal information held by us about our consumers is 589 among the assets transferred.</p> 590 </li> 591 </ul> 592 <p>From time to time, we may also use your Personal Data to send important notices to you, such as communications 593 about purchases you have made, or changes to our terms and conditions or other policies. This information is 594 important to your interactions with us, and you acknowledge that if you opt out of receiving these 595 communications, where permitted by applicable law, Expensify reserves its right to discontinue its services to 596 you.</p> 597 <p>
597If you provide feedback on the Expensify Service, we may use such feedback for any purpose. Expensify will 598 collect and store any information contained in such communication and will treat the Personal Data in such 599 communication in accordance with this Privacy Policy.</p> 600 <p>Any information, including Personal Data, which you elect to make publicly available on the Expensify Service 601 will be available to other Members or the public. If you remove information that you have made public on the 602 Expensify Service, copies may remain viewable in cached and archived pages of the Expensify Service, or if other 603 Members have copied or saved that information. </p> 604 <p>In some cases we collect information provided by our Corporate Members, and in such cases, we have no direct 605 relationship with the individuals whose Personal Data we process. If you believe your Personal Data has been 606 collected by us in such circumstances, and would no longer like to be contacted as an employee or customer of 607 one of our Corporate Members, please contact that Corporate Member directly in order to request your removal. 608 </p> 609 <p>We may send you push notifications from time-to-time in order to update you about any events or promotions that 610 we may be running. If you no longer wish to receive these types of communications, you turn them off at the 611 device level. To ensure you receive proper notifications, we will need to collect certain information about your 612 device such as operating system and user identification information.</p> 613 <h3>7. Disclosure of Your Personal Data</h3> 614 <p>We may share your Personal Data with Partner Companies to provide technical support or to provide specific 615 services, such as hosting of your applications, maintenance services, database management or payment processing 616 for purchases, reimbursements, payroll, or other payments (including but not limited to PayPal and Bancorp), and 617 with your consent, to register you for participation in the Corporate Card Program. Partner Companies will have 618 access to your Personal Data only to perform these services on our behalf and are obligated not to disclose or 619 use it for any other purpose, other than Bancorp as set forth in the notice below. They may be located, or their 620 data processing activities may take place, in the United States of America or elsewhere outside the European 621 Economic Area (EEA). </p> 622 <p>Any subsidiaries, joint ventures, or other companies under common control with us (collectively, "Related 623 Entities"), may share some or all of your Personal Data, in which case we will require our Related Entities to 624 honor this Privacy Policy and your Personal Data will only be used for the purposes set out in this Privacy 625 Policy. </p> 626 <p>A key feature of Expensify's Karma Program is the opportunity for those enrolled in the Karma Program to receive 627 emails and chats from Expensify and participants in the Karma Program. Whether you signed up for the program on 628 your own behalf or if you are a member of the Karma Program through your Corporate Member, as part of 629 administering this program we will disclose your chosen login credentials (e-mail address or phone number, 630 depending on your chosen registration method) to volunteers of the Karma Program and other Members participating 631 in the Karma program. </p> 632 <p>Expensify may sell/divest/transfer the company (including any shares in the company), or any combination of its 633 products, services, assets and/or businesses. Personal Data may be among the items sold or otherwise transferred 634 in these types of transactions, you will be notified via email and/or a prominent notice on our Site of any 635 change in ownership of your Personal Data. We may also sell, assign or otherwise transfer such information in 636 the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, reorganizations, 637 liquidations, similar transactions or proceedings involving all or a portion of the company.</p> 638 <p>
638In certain situations, Expensify and its Partner Companies may be required to disclose Personal Data in response 639 to lawful requests by public authorities, including to meet national security or law enforcement requirements. 640 Expensify may disclose Personal Data if it is necessary to (a) comply with relevant laws or to respond to 641 subpoenas or warrants or lawful requests from government authorities served on Expensify; or (b) protect or 642 defend the rights, reputation or property of Expensify or users of the Expensify Service. We look for 643 opportunities to be an advocate for you when law enforcement or other third parties subject to a legal process 644 seek to encroach on your privacy. If we receive requests from law enforcement or private parties seeking 645 information, we are prepared to take a stand when appropriate. We have various tools at our disposal that we may 646 elect to rely on to do so depending on the circumstances, for example: our legal team reviewing these requests 647 to ensure that parties are following applicable laws and statutes; rejecting or challenging requests that have 648 no legal basis or are unclear, overbroad, or otherwise inappropriate; construing legal process as narrowly as 649 possible; encouraging parties to look elsewhere for the information. We are prepared to ensure that requests 650 have a legal basis. </p> 651 <p>Except as otherwise stated in this policy and our Terms of Service, we do not sell, trade, share, or rent the 652 Personal Data collected from the Expensify Service to third parties.</p> 653 <p>We may aggregate or de-identify information collected through the Expensify Service so that such information is 654 no longer directly identifiable to an individual. We may use and share such aggregated or de-identified 655 information solely for marketing purposes or distribution to third party research firms. </p> 656 <h4>7.1 Expensify Payments LLC Privacy Notice</h4> 657 <div class="tg-wrap"> 658 <table class="tg"> 659 <thead> 660 <tr> 661 <th>FACTS</th> 662 <th>WHAT DOES EXPENSIFY PAYMENTS LLC DO WITH YOUR PERSONAL INFORMATION?</th> 663 </tr> 664 </thead> 665 <tbody> 666 <tr> 667 <td class="first-col">Why?</td> 668 <td class="info-col">Financial companies choose how they share your personal information. Federal 669 law gives consumers the right to limit some but not all sharing. Federal law also requires us to 670 tell you how we collect, share, and protect your personal information. Please read this notice 671 carefully to understand what we do.</td> 672 </tr> 673 <tr> 674 <td class="first-col">What?</td> 675 <td class="info-col">The types of personal information we collect, and share depend on the product 676 or service you have with us. This information can include: <ul> 677 <li>Name and date-of-birth</li> 678 <li>Social Security number</li> 679 <li>Personal and/or business address</li> 680 <li>Account balances and transaction history</li> 681 </ul> When you are <em>no longer</em> our customer, we continue to share your information as 682 described in this notice. </td> 683 </tr> 684 <tr> 685 <td class="first-col">How?</td> 686 <td class="info-col">All financial companies need to share customers' personal information to run 687 their everyday business. In the section below, we list the reasons financial companies can share 688 their customers' personal information; the reasons Expensify Payments chooses to share; and 689 whether you can limit this sharing.</td> 690 </tr> 691 </tbody> 692 </table> 693 </div> 694 <div class="tg-wrap"> 695 <table class="tg"> 696 <thead> 697 <tr> 698 <th>Reasons we can share your personal information</th> 699 <th>Does The Expensify Payments share?</th> 700 <th>Can you limit this sharing?</th> 701 </tr> 702 </thead> 703 <tbody> 704 <tr> 705 <td><strong>For our everyday business purposesâ</strong><br> such as to process your transactions, 706 maintain your account(s), respond to court orders and legal investigations, or report to credit 707 bureaus</td> 708 <td>Yes</td> 709 <td>No</td> 710 </tr> 711 <tr> 712 <td><strong>For our marketing purposesâ</strong><br> to offer our products and services to you </td> 713 <td>Yes</td> 714 <td>No</td> 715 </tr> 716 <tr> 717 <td><strong>For joint marketing with other financial companies</strong></td> 718 <td>No</td> 719 <td>We don't share</td> 720 </tr> 721 <tr> 722 <td><strong>For our affiliates' everyday business purposesâ</strong><br> information about your 723 transactions and experiences</td> 724 <td>No</td> 725 <td>We don't share</td> 726 </tr> 727 <tr> 728 <td><strong>For our affiliates' everyday business purposesâ</strong><br> information about your 729 creditworthiness</td> 730 <td>No</td> 731 <td>We don't share</td> 732 </tr> 733 <tr> 734 <td><strong>For nonaffiliates to market to you</strong></td> 735 <td>No</td> 736 <td>We don't share</td> 737 </tr> 738 </tbody> 739 </table> 740 </div> 741 <div class="tg-wrap"> 742 <table class="tg"> 743 <tbody> 744 <tr> 745 <th colspan="2">Who we are</th> 746 </tr> 747 <tr> 748 <td><strong>Who is providing this notice?</strong></td> 749 <td>This notice is provided by the business units of Expensify Payments LLC, and its affiliates, 750 including, but not limited to, Expensify Inc.</td> 751 </tr> 752 <tr> 753 <th colspan="2">What we do</th> 754 </tr> 755 <tr> 756 <td><strong>How does Expensify Payments protect my personal information?</strong></td> 757 <td>To protect your personal information from unauthorized access and use, we use security measures 758 that comply with federal law. These measures include computer safeguards and secured files and 759 buildings.<br> We also limit access to information to those employees for whom access is 760 necessary.</td> 761 </tr> 762 <tr> 763 <td><strong>How does Expensify Payments collect my personal information?</strong></td> 764 <td>We collect your personal information, for example, when you <ul> 765 <li>open an account or apply for a loan</li> 766 <li>
766pay your bills or make a wire transfer</li> 767 <li>provide account information</li> 768 </ul> We also collect your personal information from others, such as credit bureaus, affiliates, 769 or other companies. </td> 770 </tr> 771 <tr> 772 <td><strong>Why can't I limit all sharing?</strong></td> 773 <td>Federal law gives you the right to limit only <ul> 774 <li>sharing for affiliates' everyday business purposesâ information about your 775 creditworthiness</li> 776 <li>affiliates from using your information to market to you</li> 777 <li>sharing for nonaffiliates to market to you</li> 778 </ul> State laws and individual companies may give you additional rights to limit sharing. </td> 779 </tr> 780 <tr> 781 <th colspan="2">Definitions</th> 782 </tr> 783 <tr> 784 <td><strong>Affiliates</strong></td> 785 <td>Companies related by common ownership or control. They can be financial and nonfinancial 786 companies. </td> 787 </tr> 788 <tr> 789 <td><strong>Nonaffiliates</strong></td> 790 <td>Companies not related by common ownership or control. They can be financial and nonfinancial 791 companies. <ul> 792 <li><em>Expensify Payments does not share with nonaffiliates so they can market to you.</em> 793 </li> 794 </ul> 795 </td> 796 </tr> 797 <tr> 798 <td><strong>Joint marketing</strong></td> 799 <td>A formal agreement between nonaffiliated financial companies that together market financial 800 products or services to you. <ul> 801 <li><em>Expensify Payments doesn't jointly market.</em></li> 802 </ul> 803 </td> 804 </tr> 805 </tbody> 806 </table> 807 </div> 808 <div class="tg-wrap"> 809 <table class="tg"> 810 <tbody> 811 <tr> 812 <td colspan="2"><strong>Other Important Information</strong></td> 813 </tr> 814 <tr> 815 <td>Vermont Residents:</td> 816 <td>We will not disclose information about your creditworthiness to our affiliates and will not 817 disclose your personal 818 information, financial information, credit report, or health information to nonaffiliated third 819 parties to market to 820 you, other than as permitted by Vermont law, unless you authorize us to make those disclosures. 821 </td> 822 </tr> 823 <tr> 824 <td>Nevada Residents:</td> 825 <td>Nevada law requires that we provide you with the following contact information: Bureau of 826 Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington Ave., Suite 3900, 827 Las Vegas, NV 89101; Phone number: 702-486-3132; email: <a 828 href="mailto:[email protected]">[email protected]</a></td> 829 </tr> 830 <tr> 831 <td>California Residents:</td> 832 <td>State general privacy laws permit consumers who are California residents to (a) ask a covered 833 business which categories 834 and pieces of personal information it collects and how the information is used; (b) request
835 deletion of the information; 836 (c) request correction of incorrect personal information and (d) opt out of the sale and sharing 837 of such information. 838 State general privacy laws have exemptions for either: (i) personal information collected, 839 processed, shared, or 840 disclosed by financial institutions pursuant to federal law or (ii) financial institutions in 841 general as federal 842 financial privacy law subject entities. To contact us with questions about our 843 compliance with state general privacy laws, please reach out to [email protected]. </td> 844 </tr> 845 </tbody> 846 </table> 847 </div> 848 <h4>7.2 Service Provider, Sub-Processors/Onward Transfer</h4> 849 <p>Expensify may transfer Personal Data to companies that help us provide the Expensify Service and related 850 programs. Transfers to subsequent third parties are covered by the provisions in this Policy regarding notice 851 and choice and the service agreements with our Clients. </p> 852 <h4>7.3 Bancorp Privacy Notice</h4> 853 <p>As a Partner Company, Bancorp may have access to Personal Information. Below is a notice from Bancorp of how such 854 Personal Information may be used. For purposes of this "<strong>Bancorp Privacy Notice</strong>" subsection 855 only, "<strong>we</strong>" or "<strong>us</strong>" refers to The Bancorp Bank, N.A., and its affiliates.</p> 856 <div class="tg-wrap"> 857 <table class="tg"> 858 <thead> 859 <tr> 860 <th>FACTS</th> 861 <th>WHAT DOES THE BANCORP BANK, N.A. ("THE BANCORP") DO WITH YOUR PERSONAL INFORMATION?</th> 862 </tr> 863 </thead> 864 <tbody> 865 <tr> 866 <td class="first-col">Why?</td> 867 <td class="info-col">Financial companies choose how they share your personal information. Federal 868 law gives consumers the right to limit some but not all sharing. Federal law also requires us to 869 tell you how we collect, share, and protect your personal information. Please read this notice 870 carefully to understand what we do.</td> 871 </tr> 872 <tr> 873 <td class="first-col">What?</td> 874 <td class="info-col">The types of personal information we collect, and share depend on the product 875 or service you have with us. This information can include: <ul> 876 <li>Social Security number and income</li> 877 <li>Account balances and transaction history</li> 878 <li>Credit history and credit scores</li> 879 </ul> When you are <em>no longer</em> our customer, we continue to share your information as 880 described in this notice. </td> 881 </tr> 882 <tr> 883 <td class="first-col">How?</td> 884 <td class="info-col">All financial companies need to share customers' personal information to run 885 their everyday business. In the section below, we list the reasons financial companies can share 886 their customers' personal information; the reasons The Bancorp chooses to share; and whether you 887 can limit this sharing.</td> 888 </tr> 889 </tbody> 890 </table> 891 </div> 892 <div class="tg-wrap"> 893 <table class="tg"> 894 <thead> 895 <tr> 896 <th>Reasons we can share your personal information</th> 897 <th>Does The Bancorp share?</th> 898 <th>Can you limit this sharing?</th> 899 </tr> 900 </thead> 901 <tbody> 902 <tr> 903 <td><strong>For our everyday business purposesâ</strong><br> such as to process your transactions, 904 maintain your account(s), respond to court orders and legal investigations, or report to credit 905 bureaus</td> 906 <td>Yes</td> 907 <td>No</td> 908 </tr> 909 <tr> 910 <td><strong>For our marketing purposesâ</strong><br> to offer our products and services to you </td> 911 <td>Yes</td> 912 <td>No</td> 913 </tr> 914 <tr> 915 <td><strong>For joint marketing with other financial companies</strong></td> 916 <td>No</td> 917 <td>We don't share</td> 918 </tr> 919 <tr> 920 <td><strong>For our affiliates' everyday business purposesâ</strong><br> information about your 921 transactions and experiences</td> 922 <td>No</td> 923 <td>We don't share</td> 924 </tr> 925 <tr> 926 <td><strong>For our affiliates' everyday business purposesâ</strong><br> information about your 927 creditworthiness</td> 928 <td>No</td> 929 <td>We don't share</td> 930 </tr> 931 <tr> 932 <td><strong>For nonaffiliates to market to you</strong></td> 933 <td>No</td> 934 <td>We don't share</td> 935 </tr> 936 </tbody> 937 </table> 938 </div> 939 <div class="tg-wrap"> 940 <table class="tg"> 941 <tbody> 942 <tr> 943 <th colspan="2">Who we are</th> 944 </tr> 945 <tr> 946 <td><strong>Who is providing this notice?</strong></td> 947 <td>This notice is provided by The Bancorp Bank, N.A.</td> 948 </tr> 949 <tr> 950 <th colspan="2">What we do</th> 951 </tr> 952 <tr> 953 <td><strong>How does The Bancorp protect my personal information?</strong></td> 954 <td>To protect your personal information from unauthorized access and use, we use security measures 955 that comply with federal law. These measures include computer safeguards and secured files and 956 buildings.<br> We also limit access to information to those employees for whom access is 957 necessary.</td> 958 </tr> 959 <tr> 960 <td><strong>How does The Bancorp collect my personal information?</strong></td> 961 <td>We collect your personal information, for example, when you <ul> 962 <li>open an account or apply for a loan</li> 963 <li>
963pay your bills or make a wire transfer</li> 964 <li>provide account information</li> 965 </ul> We also collect your personal information from others, such as credit bureaus, affiliates, 966 or other companies. </td> 967 </tr> 968 <tr> 969 <td><strong>Why can't I limit all sharing?</strong></td> 970 <td>Federal law gives you the right to limit only <ul> 971 <li>sharing for affiliates' everyday business purposesâ information about your 972 creditworthiness</li> 973 <li>affiliates from using your information to market to you</li> 974 <li>sharing for nonaffiliates to market to you</li> 975 </ul> State laws and individual companies may give you additional rights to limit sharing. </td> 976 </tr> 977 <tr> 978 <th colspan="2">Definitions</th> 979 </tr> 980 <tr> 981 <td><strong>Affiliates</strong></td> 982 <td>Companies related by common ownership or control. They can be financial and nonfinancial 983 companies. <ul> 984 <li><em>The Bancorp does not share with our affiliates.</em></li> 985 </ul> 986 </td> 987 </tr> 988 <tr> 989 <td><strong>Nonaffiliates</strong></td> 990 <td>Companies not related by common ownership or control. They can be financial and nonfinancial 991 companies. <ul> 992 <li><em>The Bancorp does not share with nonaffiliates so they can market to you.</em> </li> 993 </ul> 994 </td> 995 </tr> 996 <tr> 997 <td><strong>Joint marketing</strong></td> 998 <td>A formal agreement between nonaffiliated financial companies that together market financial 999 products or services to you. <ul> 1000 <li><em>The Bancorp doesn't jointly market.</em></li> 1001 </ul> 1002 </td> 1003 </tr> 1004 </tbody> 1005 </table> 1006 </div> 1007 <div class="tg-wrap"> 1008 <table class="tg"> 1009 <tbody> 1010 <tr> 1011 <td colspan="2"><strong>Other Important Information</strong></td> 1012 </tr> 1013 <tr> 1014 <td>Vermont Residents:</td> 1015 <td>We will not disclose information about your creditworthiness to our affiliates and will not 1016 disclose your personal 1017 information, financial information, credit report, or health information to nonaffiliated third 1018 parties to market to 1019 you, other than as permitted by Vermont law, unless you authorize us to make those disclosures. 1020 </td> 1021 </tr> 1022 <tr> 1023 <td>Nevada Residents:</td> 1024 <td>Nevada law requires that we provide you with the following contact information: Bureau of 1025 Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington Ave., Suite 3900, 1026 Las Vegas, NV 89101; Phone number: 702-486-3132; email: <a 1027 href="mailto:[email protected]">[email protected]</a></td> 1028 </tr> 1029 <tr> 1030 <td>California Residents:</td> 1031 <td>State general privacy laws permit consumers who are California residents to (a) ask a covered 1032 business which categories 1033 and pieces of personal information it collects and how the information is used; (b) request
1034 deletion of the information; 1035 (c) request correction of incorrect personal information and (d) opt out of the sale and sharing 1036 of such information. 1037 State general privacy laws have exemptions for either: (i) personal information collected, 1038 processed, shared, or 1039 disclosed by financial institutions pursuant to federal law or (ii) financial institutions in 1040 general as federal 1041 financial privacy law subject entities. To contact us with questions about our compliance with 1042 state general privacy 1043 laws, call 1-833-981-1080; visit our website: <a 1044 href="https://www.thebancorp.com/ccpa-web-form/">https://www.thebancorp.com/ccpa-web-form/</a> 1045 or write to: The Bancorp/CCPA, PO Box 5017, Sioux Falls, SD 57117-5017.</td> 1046 </tr> 1047 </tbody> 1048 </table> 1049 </div> 1050 <h4>7.4 Sharing with Corporate Members </h4> 1051 <p>When a Member connects to a Workspace, such Member understands and agrees that the Corporate Member has access 1052 and a right to the Member Data related to transactions associated with the Workspace (including any Personal 1053 Data) for its internal bookkeeping purposes. A Corporate Member will maintain the following information when you 1054 connect with a Workspace: full name, email, phone number, and expense data. Please contact the Corporate Member 1055 directly for more information about what Personal Data the Corporate Member maintains.</p> 1056 <h3>8. Choice/Opt-out</h3> 1057 <p>Expensify offers you the choice of receiving different types of communication and information related to our 1058 company, products and services. You may subscribe to e-newsletters or other publications; you may also elect to 1059 receive marketing communications and other special offers from us via email or SMS messaging. You may also 1060 opt-in to communicate with other Members and Non-Members via SMS messaging. If at any time you would like to 1061 change your communication preferences, we provide unsubscribe links and an opt-out mechanism for your 1062 convenience where available. You may also access and manage your preferences from your account. </p> 1063 <h3>9. Personal Data Changes</h3> 1064 <p>If you believe that the Personal Data we hold about you may not be complete, accurate and up-to-date, you may 1065 change aspects of any of your Personal Data in your account by editing your profile within the registration 1066 portion of the Site. You may request deletion of your account information by us, but please note that we may be 1067 permitted or required (by law or otherwise) to keep this information and not delete or change it (or to keep 1068 this information for a certain time, in which case we will comply with your deletion request only after we have 1069 fulfilled such requirements). If you request deletion, subject to our rights to retain the Personal Data as set 1070 out in this Privacy Policy and the rights of any Corporate Member to retain the Personal Data as set forth 1071 below, we will respond to your request within 1 month. We will retain your information for as long as your 1072 account is active or as needed to provide you services. We will retain and use your information as necessary to 1073 comply with our legal obligations, resolve disputes, and enforce our agreements.</p> 1074 <h4>9.1 Access to Data Controlled by our Corporate Members</h4> 1075 <p>You have the right to access your Personal Data subject to any exceptions which may apply in the jurisdiction in 1076 which you reside. If you have connected to a Workspace and shared your Personal Data with the Corporate Member 1077 administering such Workspace, you acknowledge that some Personal Data shared with a Corporate Member may not be 1078 able to be deleted as it pertains to their records. Upon request, we will provide you with information about 1079 whether any of your Personal Data is shared with a Corporate Member administering a connected Workspace. 1080 If you wish for your Personal Data held by a Corporate Member to be deleted, we advise you to contact the 1081 Corporate
1082 Member directly to request deletion, as the Corporate Member is a data controller in its own right and therefore 1083 will 1084 control the deletion of the Personal Data it holds.</p> 1085 <h4>9.2 Blog / Forum</h4> 1086 <p>Our Site offers publicly accessible blogs or community forums. You should be aware that any information you 1087 provide in these areas may be read, collected, and used by others who access them, as well as by our third-party 1088 service providers such as OpenAI, L.L.C., to ensure compliance with our Acceptable Use Policy and Content 1089 Standards through our Enforcement Policy. To request removal of your Personal Data from our blog or community 1090 forum, contact us at <a href="mailto:[email protected]">[email protected]</a>. In some cases, we may 1091 not be able to remove your Personal Data, in which case we will let you know if we are unable to do so and why. 1092 </p> 1093 <h3>10. Security of Your Application And Personal Data</h3> 1094 <p>Expensify is committed to protecting the security of your Personal Data. We use a variety of industry-standard 1095 security technologies and procedures to help protect your Personal Data from unauthorized access, use, or 1096 disclosure. When you enter sensitive information (such as a credit card number) on our order forms, we encrypt 1097 the transmission of that information using secure socket layer technology (SSL). We also require you to enter a 1098 password and/or other sign-on mechanism to access your account information. Please do not disclose your account 1099 password and/or other sign-on mechanism to unauthorized people. Despite these measures, you should know that 1100 Expensify cannot fully eliminate security risks associated with Personal Data. If you have any questions about 1101 the security of your Personal Data, you can contact us at [email protected]. </p> 1102 <h3>11. Contact Information</h3> 1103 <p>If you have any comments, questions or complaints about this Privacy Policy or if you feel that we have breached 1104 our obligations in the handling, use or disclosure of your Personal Data, feel free to email comments or 1105 questions to us at <a href="mailto:[email protected]">[email protected]</a> or 401 SW 5th Ave, 1106 Portland, OR 97204. </p> 1107 <p>If you have general enquiry type questions, you can choose to use a pseudonym. However, if you require 1108 information which is specific to your circumstances then it may not be possible for you to deal with us by 1109 pseudonym. You acknowledge and agree that when contacting Expensify, whether by email, chat, or otherwise, you 1110 will not include any personally identifiable information in your communications, and that if such information is 1111 included in your communications with Expensify, Expensify will have no legal obligation or liability with regard 1112 to such information.</p> 1113 <h3>12. Changes to this Privacy Policy</h3> 1114 <p>If Expensify makes changes to this Privacy Policy, these changes will be posted on the Site and Application in a 1115 timely manner. Expensify reserves the right to modify this Privacy Policy at any time, so please review it 1116 frequently. You acknowledge that the updated policy will apply to the collection, storage, use or disclosure of 1117 Personal Data from the date of publication and it is your responsibility to check the Site and Application 1118 regularly for updates. You can determine when this Privacy Policy was last revised by referring to the 1119 "<strong>Last Updated</strong>" legend at the top of this page. Any changes to this Privacy Policy will become 1120 effective upon our posting of the revised Privacy Policy on the Site and Application. If we make any material 1121 changes, we will notify you by email (sent to the e-mail address specified in your account) or by means of a 1122 notice on this Site prior to the change becoming effective. Use of the Expensify Service following such changes 1123 constitutes your acceptance of the revised Privacy Policy then in effect. We encourage you to periodically 1124 review this page for the latest information on our privacy practices. </p> 1125 <h3>13. Overseas Disclosure</h3> 1126 <p>Expensify is based in the United States, and, unless we expressly agree otherwise, we may host, transfer, and 1127 process data, including Personal Data, in the United States and in other countries through Expensify and third 1128 parties that we use to operate and manage the Service. The
1128se countries may have data protection laws that are 1129 different from those of your country of residence. When you access or use the Service, or otherwise provide 1130 information to us, you understand and acknowledge that the processing and transfer of information in and to the 1131 United States and other countries which may have different privacy laws from your or their country of residence. 1132 Expensify takes appropriate measures to ensure such transfers are in compliance with applicable laws and subject 1133 to the additional jurisdictional terms set forth in Section 15(A) and 15(C) below. </p> 1134 <h3>14. Data Retention</h3> 1135 <p>Other than in aggregated or de-identified form as permitted under the Expensify Terms of Service, and except as 1136 required by applicable law, we will delete or otherwise destroy your Personal Data as soon as practicably 1137 possible following your termination or cancellation of your use of the Expensify Service. </p> 1138 <p>Expensify will retain data licensed to our Corporate Members as set forth in the Expensify Terms of Service for 1139 as long as needed to provide services to our Corporate Member. Expensify will retain and use this information as 1140 necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We ensure that 1141 Personal Data we dispose of is de-identified or destroyed in a secure fashion. </p> 1142 <p>The Corporate Member with which you are affiliated with may have specific policies concerning the retention of 1143 data including Member-Generated Content. Please consult the entity or organization with which you are affiliated 1144 with for additional detail about its specific data retention policies. </p> 1145 <h3>15. Jurisdiction-Specific Provisions</h3> 1146 <h4>15.1 Additional Disclosures for Data Subjects in the United Kingdom, European Economic Area (EEA), and 1147 Switzerland</h4> 1148 <h5>15.1.1 International Transfers</h5> 1149 <p>Where we transfer your Personal Data to another country outside the UK, EEA and / or Switzerland, we will ensure 1150 that it is protected and transferred in a manner consistent with legal requirements. In relation to data being 1151 transferred outside the UK and / or EEA, for example, this may be done in one of the following ways:</p> 1152 <ol class="styled marginLeft30"> 1153 <li> 1154 <p>the country that we send the data to might be approved by relevant data protection authorities as 1155 offering an adequate level of protection for Personal Data;</p> 1156 </li> 1157 <li> 1158 <p>the recipient might have signed up to a contract based on "model contractual clauses" approved by 1159 relevant data protection authorities, obliging them to protect your Personal Data;</p> 1160 </li> 1161 <li> 1162 <p>the recipient may have adhered to binding corporate rules (only for intragroup transfers); or</p> 1163 </li> 1164 <li> 1165 <p>in other circumstances the law may permit us to otherwise transfer your Personal Data outside Europe. 1166 </p> 1167 </li> 1168 </ol> 1169 <p>You can obtain more details of the protection given to your Personal Data when it is transferred outside the UK, 1170 EEA and / or Switzerland (including a copy of the standard data protection clauses which we have entered into 1171 with recipients of your Personal Data) by contacting us as described in Section 16 below. Please note, following 1172 recent decisions invalidating the adequacy of the EU-U.S. and Swiss-U.S. <span 1173 style="text-decoration:underline">Privacy Shields</span>, we no longer rely on the <span 1174 style="text-decoration:underline">Privacy Shields</span> for cross-border personal data transfers. However, 1175 Expensify participates in the EU-U.S. Data Privacy Framework with UK Extension, and Swiss-U.S. Data Privacy 1176 Framework, and more information about these programs is also provided below.</p> 1177 <h5>15.1.2 Our Relationship with You</h5> 1178 <p>Expensify is made up of different legal entities, including Expensify, Inc., the parent company. This Privacy Policy is issued on behalf of the Expensify Group so when we mention 1179 "<strong>Expensify</strong>", "<strong>we</strong>", "<strong>us</strong>" or "<strong>our</strong>" in this 1180 Privacy Policy, we are referring to the relevant company in the Expensify Group responsible for processing your 1181 data. Expensify, Inc. is the controller for all of your Personal Data unless explicitly otherwise identified in 1182 the applicable contracts. </p> 1183 <p>
1183In respect of the Corporate Card Program, Expensify, Inc is the controller for any Personal Data which you 1184 provide which is related to facilitating the management of the card program, and the Issuer (being Transact 1185 Payments Limited for Corporate Card Programs in the UK and Transact Payments Malta Limited for Corporate Card 1186 Programs in the EEA) ("TPL", "we", "our" or "us") is the controller for 1187 the Personal Data which you provide to enable the provision of the card services. The privacy policy for Transact 1188 Payments Limited is available <a href="/tplprivacy">here</a>. The privacy policy for Transact Payments Malta 1189 Limited is available <a href="/tpmlprivacy">here</a>.</p> 1190 <p>We have appointed an Expensify Group entity based in the Netherlands to act as our representative in the EU. If 1191 you are located in the EU, you may address this entity to raise any issues or queries relating to our processing 1192 of your Personal Data. Our EU representative is Expensify Netherlands B.V. and can be contacted in the manner 1193 set out at Section 16 below. </p> 1194 <h5>15.1.3 Legal Basis for Processing</h5> 1195 <p>We have listed the use of your Personal Data by us in Section 6 above. The legal grounds on which we process the 1196 Personal Data for those uses includes; if you consent to the processing, to satisfy our legal obligations, if it 1197 is necessary to carry out our obligations arising from any contracts we entered with you or to take steps at 1198 your request prior to entering into a contract with you, or for our legitimate interests to providing our 1199 services to our customers and the effective management of Expensify and to protect our property, rights or 1200 safety of Expensify, our customers or others. If data processing is based on consent, note that you have the 1201 right to withdraw your consent at any time, but that the withdrawal of your consent does not affect the 1202 lawfulness of processing based on consent before its withdrawal.</p> 1203 <h5>15.1.4 Your Privacy Rights</h5> 1204 <p>Under certain circumstances, you have rights under data protection laws in relation to your personal data, such 1205 as: </p> 1206 <ul class="<strong>styled marginLeft30</strong>"> 1207 <li> 1208 <p><strong>Access: </strong>The right to request access to the Personal Data that Expensify has about you; 1209 </p> 1210 </li> 1211 <li> 1212 <p><strong>Rectification:</strong> The right to rectify or correct any Personal Data that is inaccurate or 1213 incomplete;</p> 1214 </li> 1215 <li> 1216 <p><strong>Portability: </strong>The right to request a copy of your Personal Data in electronic format so 1217 that you can transmit the data to third parties, or to request that Expensify directly transfer your 1218 Personal Data to one more third parties;</p> 1219 </li> 1220 <li> 1221 <p><strong>Objection: </strong>The right to object to the processing of your Personal Data for certain 1222 purposes;</p> 1223 </li> 1224 <li> 1225 <p><strong>Erasure: </strong>The right to erasure of your Personal Data when it is no longer needed for the 1226 purposes for which you provided it, as well as the right to restriction of processing of your Personal 1227 Data to certain limited purposes where erasure is not possible.</p> 1228 </li> 1229 <li> 1230 <p><strong>Restriction: </strong>You have the right to request that we restrict our processing of your 1231 Personal Data where you believe such data to be inaccurate; our processing is unlawful; or we no longer 1232 need to process such data for a particular purpose, but where we are not able to delete the data due to 1233 a legal or other obligation or because you do not want us to delete it. </p> 1234 </li> 1235 <li> 1236 <p><strong>Consent:</strong> the right to withdraw your consent to the processing of your Personal Data at 1237 any time. Please note, however, that we may be required to retain Personal Data to comply with 1238 a legal obligation. </p> 1239 </li> 1240 </ul> 1241 <p>The rights described above may not be absolute and are limited by applicable laws. </p> 1242 <p>You can exercise your privacy rights by contacting us via email at: <a 1243 href="mailto:[email protected]">[email protected]</a>. We will handle your request under 1244 applicable law. When you make a request, we may verify your identity to protect your privacy and security.</p> 1245 <h5>15.1.5 International and Onward Transfers of Data</h5> 1246 <p>
1246Information that our European users submit through the Expensify Service or the Site is sent to and stored on 1247 secure servers located in the United States of America and may be transferred by us to our other offices and/or 1248 to the third parties (such as our Partner Companies, as defined below), who may be situated in the United States 1249 of America or elsewhere outside the European Economic Area (EEA) and may be processed by staff operating outside 1250 the EEA. The US and other non-EEA countries do not have similar data protection laws to the European Union, and 1251 you should be aware in particular that the law and practice in the United States and some other non-EEA 1252 countries in respect of law enforcement and national security authority access to data is significantly 1253 different from Europe. However, we will ensure as reasonably as possible that where your personal information is 1254 to be transferred or shared outside the EEA, that it is only transferred or shared where we have appropriate 1255 safeguards in place, for example by agreeing to the standard contractual clauses adopted by the European 1256 Commission.</p> 1257 <p>For individuals located in the European Economic Area ("<strong>EEA</strong>"), United Kingdom, or Switzerland 1258 (collectively the "<strong>Designated Countries</strong>"): Where personal data are transferred to a third 1259 country or to an international organisation, Expensify implements appropriate safeguards, such as contractual 1260 obligations, and standard contractual clauses adopted by the European Commission relating to the transfer.</p> 1261 <p>You also have a right to lodge a complaint with a competent supervisory authority situated in a member state of 1262 your habitual residence, place of work, or place of alleged infringement. You can find the relevant supervisory 1263 authority name and contact details <a target="_blank" rel="noopener noreferrer" 1264 href="https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-are-data-protection-authorities-dpas_en">here 1265 for individuals located in the EEA</a> and <a target="_blank" rel="noopener noreferrer" 1266 href="https://ico.org.uk/make-a-complaint/">here for 1267 individuals located in the United Kingdom</a>.</p> 1268 <h5>15.1.6 EU-U.S. Data Privacy Framework with UK Extension, and Swiss-U.S. Data Privacy Framework</h5> 1269 </p> 1270 <p>Expensify, Inc. complies with the EU-U.S. Data Privacy Framework 1271 (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) 1272 as set forth by the U.S. Department of Commerce. Expensify, Inc. 1273 has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework 1274 Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European 1275 Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) under the UK Extension to the 1276 EU-U.S. DPF. Expensify, Inc. has certified to the U.S. Department 1277 of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) 1278 with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If 1279 there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the 1280 Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) 1281 program, and to view our certification, please visit <a target="_blank" rel="noopener noreferrer" 1282 href="https://www.dataprivacyframework.gov/">https://www.dataprivacyframework.gov/</a>.</p> 1283 <p>Expensify, Inc. is responsible for the processing of personal data 1284 it receives, under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF and subsequently 1285 transfers to a third party acting as an agent on its behalf. Expensify, Inc. complies with the EU-U.S. DPF Principles and the Swiss-U.S. DPF Principles for all onward 1286 transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions. 1287 </p> 1288 <p>The Federal Trade Commission has jurisdiction over Expensify's compliance with the EU-U.S. DPF, the UK Extension 1289 to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain situations, Expensify, Inc. may be required to disclose personal data in response to lawful requests by public authorities, 1290 including to meet national security or law enforcement requirements. </p> 1291 <p>
1291In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Expensify, Inc. 1292 commits to refer unresolved complaints concerning our handling of 1293 personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. 1294 DPF to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive 1295 timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF 1296 Principles-related complaint to your satisfaction, please visit <a target="_blank" rel="noopener noreferrer" 1297 href="https://feedback-form.truste.com/watchdog/request">https://feedback-form.truste.com/watchdog/request</a> 1298 for more information or to file a complaint. These dispute resolution services are provided at no cost to you. 1299 </p> 1300 <p>For complaints regarding EU-U.S. DPF, the UK Extension to the EU-U.S DPF, and Swiss-U.S. DPF compliance not 1301 resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke 1302 binding arbitration. Further information can be found on the official DPF website <a target="_blank" 1303 rel="noopener noreferrer" 1304 href="https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction">https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction</a>.</p> 1305 <h4>15.2 Additional Disclosures for Data Subjects in California, Colorado, Connecticut, Nevada, Utah, and Virginia 1306 </h4> 1307 <p>This Statement is designed to be consistent with California, Colorado, Connecticut, Nevada, Utah, and Virginia 1308 privacy laws. When addressing California law, this Statement uses certain terms that have the meanings given to 1309 them by the California Consumer Privacy Act (CCPA), as amended, unless otherwise specified.</p> 1310 <h5>15.2.1 Definitions Specific to this Section for California Residents</h5> 1311 <p>The CCPA includes definitions for terms specific to this California Privacy Policy that do not apply to the rest 1312 of this Privacy Policy, including the following terms:</p> 1313 <ul class="styled marginLeft30"> 1314 <li> 1315 <p>"<strong>Personal Information</strong>" means information that identifies, relates to, describes, is 1316 reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with 1317 a particular consumer or household. Personal Information does not include publicly available information 1318 obtained from government records; deidentified or aggregated consumer information that cannot be 1319 reconstructed to identify you; any information covered under the Gramm-Leach-Bliley Act or the 1320 California Financial Information Privacy Act, activities covered by the Fair Credit Reporting Act, or 1321 protected health information as defined under the Health Insurance Portability and Accountability Act. 1322 </p> 1323 </li> 1324 <li> 1325 <p>"<strong>Sale</strong>" or "<strong>sell</strong>" means selling, renting, releasing, disclosing, 1326 disseminating, making available, transferring, or otherwise communicating orally, in writing, or by 1327 electronic or other means, a consumer's Personal Information by the business to another business or a 1328 third party for monetary or other valuable consideration.</p> 1329 </li> 1330 <li> 1331 <p>"<strong>Service Provider</strong>" means a sole proprietorship, partnership, limited liability company, 1332 corporation, association, or other legal entity that is organized or operated for the profit or 1333 financial benefit of its shareholders or other owners, that processes information on behalf of a 1334 business and to which the business discloses a consumer's Personal Information for a business purpose 1335 pursuant to a written contract.</p> 1336 </li> 1337 </ul> 1338 <h5>15.2.2 Collection and Use</h5> 1339 <h6>15.2.2(a) Collection</h6> 1340 <p>During the 12-month period prior to the effective date of this Statement, we may have collected the following 1341 categories of personal information, including sensitive personal information, about you: </p> 1342 <ul class="styled marginLeft30"> 1343 <li> 1344 <p><strong>Identifiers:</strong>
1344 identifiers such as a real name, alias, postal address, unique personal 1345 identifier (such as customer number, unique pseudonym, or user alias), email address, account name, 1346 Social Security number, driver's license number, and other similar identifiers, physical characteristics 1347 or description, state identification card number, and signature</p> 1348 </li> 1349 <li> 1350 <p><strong>Identifiers (Online):</strong> a device identifier; cookies, beacons, pixel tags, mobile ad 1351 identifiers and similar technology; other forms of persistent or probabilistic identifiers, and Internet 1352 Protocol address</p> 1353 </li> 1354 <li> 1355 <p><strong>Other Financial, Medical, and Health Information:</strong> bank account number, credit card 1356 number, debit card number, insurance policy number, and other financial information, medical 1357 information, and health insurance information</p> 1358 </li> 1359 <li> 1360 <p><strong>Information Related to Characteristics Protected Under California or Federal Law:</strong> 1361 characteristics of protected classifications under California or federal law, such as race, color, 1362 national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, 1363 marital status, medical condition, ancestry, genetic information, disability, citizenship status, and 1364 military and veteran status</p> 1365 </li> 1366 <li> 1367 <p> <strong>Commercial Information:</strong> including records of personal property, products or services 1368 purchased, obtained, or considered, and other purchasing or consuming histories or tendencies </p> 1369 </li> 1370 <li> 1371 <p><strong>Internet and Other Electronic Network Activity Information:</strong> including, but not limited 1372 to, browsing history, search history, and information regarding your interaction with websites, 1373 applications or advertisements</p> 1374 </li> 1375 <li> 1376 <p><strong>Geolocation Data</strong></p> 1377 </li> 1378 <li> 1379 <p><strong>Sensory Information:</strong> Audio, electronic, visual, thermal, and similar information </p> 1380 </li> 1381 <li> 1382 <p><strong>Professional or Employment-Related Information</strong></p> 1383 </li> 1384 <li> 1385 <p><strong>Education Information</strong></p> 1386 </li> 1387 <li> 1388 <p><strong>Profile Inferences:</strong> inferences drawn from any of the information identified above to 1389 create a profile about you reflecting your preferences, characteristics, psychological trends, 1390 predispositions, behavior, attitudes, intelligence, abilities, and/or aptitude</p> 1391 </li> 1392 </ul> 1393 <h6>15.2.2(b) Sources of collection</h6> 1394 <p>We collected personal information about you from the following sources:</p> 1395 <ul class="styled marginLeft30"> 1396 <li> 1397 <p>You</p> 1398 </li> 1399 <li> 1400 <p>Expensify</p> 1401 </li> 1402 <li> 1403 <p>Device(s) You Used</p> 1404 </li> 1405 <li> 1406 <p>Service Providers</p> 1407 </li> 1408 </ul> 1409 <h6>15.2.2(c) Purposes for collection/use</h6> 1410 <p>We collected and used personal information about you for the following purposes: </p> 1411 <ul class="styled marginLeft30"> 1412 <li> 1413 <p>Performing services you have purchased from or contracted for with us, including maintaining or servicing 1414 accounts, as well as providing customer service, processing transactions, verifying customer 1415 information, processing payments, providing advertising or marketing services, providing analytics 1416 services, or providing similar services</p> 1417 </li> 1418 <li> 1419 <p>Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad 1420 impressions, and auditing compliance</p> 1421 </li> 1422 <li> 1423 <p>Detecting and responding to security incidents, protecting against and responding to malicious, 1424 deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity </p> 1425 </li> 1426 <li> 1427 <p>Short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of 1428 your interactions with our digital properties</p> 1429 </li> 1430 <li> 1431 <p>Debugging to identify and repair errors that impair existing intended functionality</p> 1432 </li> 1433 <li> 1434 <p>Undertaking internal research for technological development and demonstration</p> 1435 </li> 1436 <li> 1437 <p>Undertaking activities to verify or maintain the quality or safety of a service that is owned, 1438 manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or 1439 device that is owned, manufactured, manufactured for, or controlled by us</p> 1440 </li> 1441 <li> 1442 <p>Displaying advertisements intended for you based on personal information, related to your activities over 1443 time and across nonaffiliated websites or online applications, used to predict your preferences or 1444 interests (targeted advertising) </p> 1445 </li> 1446 <li> 1447 <p>Customizing your experience on our digital properties </p> 1448 </li> 1449 <li> 1450 <p>Processing liability claims</p> 1451 </li> 1452 <li> 1453 <p>Complying with and enforcing applicable legal requirements, relevant industry standards and our policies 1454 </p> 1455 </li> 1456 </ul> 1457 <h5>15.2.3 Disclosures</h5> 1458 <ol class="styled lower-alpha marginLeft30"> 1459 <li> 1460 <p>We may have disclosed the following categories of personal information for a business purpose:</p> 1461 <ul class="styled marginLeft30"> 1462 <li> 1463 <p>Identifiers</p> 1464 </li> 1465 <li> 1466 <p>Identifiers (Online)</p> 1467 </li> 1468 <li> 1469 <p>Other Financial, Medical and Health Information</p> 1470 </li> 1471 <li> 1472 <p>Information Related to Characteristics Protected Under California or Federal Law</p> 1473 </li> 1474 <li> 1475 <p>Commercial Information</p> 1476 </li> 1477 <li> 1478 <p>
1478Biometrics</p> 1479 </li> 1480 <li> 1481 <p>Internet and Other Electronic Network Activity Information</p> 1482 </li> 1483 <li> 1484 <p>Geolocation Data</p> 1485 </li> 1486 <li> 1487 <p>Sensory Information</p> 1488 </li> 1489 <li> 1490 <p>Professional or Employment-Related Information</p> 1491 </li> 1492 <li> 1493 <p>Education Information</p> 1494 </li> 1495 <li> 1496 <p>Profile Inferences</p> 1497 </li> 1498 </ul> 1499 </li> 1500 <li> 1501 <p>We may share personal information about you for cross-context behavioral advertising â seeking to place 1502 ads to you on others' digital properties based, at least in part, on personal information obtained from 1503 your activity on others' digital properties. </p> 1504 </li> 1505 <li> 1506 <p>We may have sold (as defined under California, Colorado and Connecticut laws) the following categories of 1507 personal information: </p> 1508 <ul class="styled marginLeft30"> 1509 <li> 1510 <p>Identifiers (online) associated with a device used to interact with our digital properties or 1511 advertisements (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers 1512 and similar technology)</p> 1513 </li> 1514 <li> 1515 <p>Internet and other electronic network activity information associated with a device used to 1516 interact with Digital Properties or advertisements</p> 1517 </li> 1518 <li> 1519 <p>Profile inferences (solely as sale is defined under California rules)</p> 1520 </li> 1521 </ul> 1522 </li> 1523 <li> 1524 <p>We do not sell the personal information of consumers under the age of 18 if we have actual knowledge of 1525 the individual's age.</p> 1526 </li> 1527 <li> 1528 <p>We do not sell personal information as the term is traditionally understood or as defined under Nevada, 1529 Utah, or Virginia law. For example, we do not exchange for money personal information to data brokers or 1530 third parties for their marketing purposes independent of us.</p> 1531 </li> 1532 <li> 1533 <p><strong>Sensitive Personal Information: </strong>We do not share sensitive personal information for 1534 cross-context behavioral advertising. We do not sell sensitive personal information. </p> 1535 </li> 1536 <li> 1537 <p>We may have disclosed personal information about you with the following categories of third parties: </p> 1538 <ul class="styled marginLeft30"> 1539 <li> 1540 <p>Our affiliates</p> 1541 </li> 1542 <li> 1543 <p>Our business partners</p> 1544 </li> 1545 <li> 1546 <p>Third-party marketing partners</p> 1547 </li> 1548 <li> 1549 <p>Government entities, including law enforcement</p> 1550 </li> 1551 </ul> 1552 </li> 1553 </ol> 1554 <p>Information we disclose to third parties:</p> 1555 <div class="tg-wrap"> 1556 <table class="tg"> 1557 <tbody> 1558 <tr> 1559 <th>3rd party categories</th> 1560 </tr> 1561 <tr> 1562 <th>Personal Information Categories </th> 1563 <th>Our Affiliates</th> 1564 <th>Our Business Partners</th> 1565 <th>Third-party Marketing Partners </th> 1566 <th>Government Entities, Including Law Enforcement *See Disclosure</th> 1567 </tr> 1568 <tr> 1569 <td>Information Related to Characteristics Protected Under California or Federal Law</td> 1570 <td>No</td> 1571 <td>No</td> 1572 <td>No</td> 1573 <td>Yes</td> 1574 </tr> 1575 <tr> 1576 <td>Commercial Information</td> 1577 <td>Yes</td> 1578 <td>Yes</td> 1579 <td>No</td> 1580 <td>Yes</td> 1581 </tr> 1582 <tr> 1583 <td>Biometrics</td> 1584 <td>No</td> 1585 <td>No</td> 1586 <td>No</td> 1587 <td>Yes</td> 1588 </tr> 1589 <tr> 1590 <td>Internet and Other Electronic Network Activity Information</td> 1591 <td>Yes</td> 1592 <td>No</td> 1593 <td>Yes</td> 1594 <td>Yes</td> 1595 </tr> 1596 <tr> 1597 <td>Geolocation Data</td> 1598 <td>No</td> 1599 <td>No</td> 1600 <td>No</td> 1601 <td>Yes</td> 1602 </tr> 1603 <tr> 1604 <td>Sensory Information</td> 1605 <td>No</td> 1606 <td>No</td> 1607 <td>No</td> 1608 <td>Yes</td> 1609 </tr> 1610 <tr> 1611 <td>Professional or Employment Related Information </td> 1612 <td>No</td> 1613 <td>No</td> 1614 <td>No</td> 1615 <td>Yes</td> 1616 </tr> 1617 <tr> 1618 <td>Education Information</td> 1619 <td>No</td> 1620 <td>No</td> 1621 <td>No</td> 1622 <td>Yes</td> 1623 </tr> 1624 <tr> 1625 <td>Profile Inferences</td> 1626 <td>Yes</td> 1627 <td>No</td> 1628 <td>No</td> 1629 <td>Yes</td> 1630 </tr> 1631 </tbody> 1632 </table> 1633 </div> 1634 <p>Please note: Expensify shares Personal Information with government entities, including law enforcement, only in 1635 the following circumstances: (1) when required to do so as a matter of law; (2) to assist in the investigation 1636 of a potential crime impacting Expensify, its employees, its customers, or the communities we serve; or (3) when 1637 required in response to legal process (e.g., subpoena, search warrant).</p> 1638 <h5>15.2.4 Retention â California Residents</h5> 1639 <p>Expensify has in place a records-retention schedule reflecting our intended retention periods for certain types 1640 of information. The following reflects the longest applicable intended retention period by personal-information 1641 category for information related to California consumers acquired on or after January 1, 2023. Once the intended 1642 retention period has passed, subject information is to be deleted or modified such that it is no longer personal 1643 information.</p> 1644 <div class="tg-wrap"> 1645 <table class="tg"> 1646 <tbody> 1647 <tr> 1648 <th>Personal Information Categories </th> 1649 <th>Intended Retention Period </th> 1650 </tr> 1651 <tr> 1652 <td>Biometrics</td> 1653 <td>Up to 10 years after last activity, subject to contractual obligations</td> 1654 </tr> 1655 <tr> 1656 <td>Commercial Information</td> 1657 <td>10 years after expiration of contractual obligations</td> 1658 </tr> 1659 <tr> 1660 <td>Education Information</td> 1661 <td>10 Years after termination of employment</td> 1662 </tr> 1663 <tr> 1664 <td>Geolocation Data</td> 1665 <td>Up to 3 Years</td> 1666 </tr> 1667 <tr> 1668 <td>Identifiers</td> 1669 <td>Up to 10 years after last activity, subject to contractual obligations</td> 1670 </tr> 1671 <tr> 1672 <td>Identifiers (Online)</td> 1673 <td>Up to 3 years</td> 1674 </tr> 1675 <tr> 1676 <td>Information Related to Characteristics Protected Under California or Federal Law</td> 1677 <td>Up to 3 years</td> 1678 </tr> 1679 <tr> 1680 <td>Internet and Other Electronic Network Activity Information</td> 1681 <td>Up to 3 years</td> 1682 </tr> 1683 <tr> 1684 <td>Other Financial, Medical and Health Information </td> 1685 <td>Up to 10 years after last activity, subject to contractual obligations</td> 1686 </tr> 1687 <tr> 1688 <td>Professional or Employment Related Information </td> 1689 <td>10 Years after termination of employment</td> 1690 </tr> 1691 <tr> 1692 <td>Profile Inferences</td> 1693 <td>Up to 3 years</td> 1694 </tr> 1695 <tr> 1696 <td>Sensory Information</td> 1697 <td>Up to 40 Days</td> 1698 </tr> 1699 </tbody> 1700 </table> 1701 </div> 1702 <p>There are a number of reasons personal information may be retained longer than the intended retention period. For 1703 example, deletion or modification does not happen immediately after a retention period has passed and instead 1704 executes periodically, no less frequently than annually. Additionally, some information systems or information 1705 may be placed on legal holds due to potential litigation or regulatory review and information, therefore, is not 1706 deleted or modified.</p> 1707 <h5>15.2.5 Consumer Privacy Rights</h5> 1708 <p>You have certain choices regarding our use and disclosure of personal information about you, as described below. 1709 </p> 1710 <ul class="styled marginLeft30"> 1711 <li> 1712 <p><strong>Access:</strong> You have the right to request, twice in a 12-month period, that we disclose to 1713 you the personal information related to you we have collected during the past 12 months. This may 1714 include:</p> 1715 </li> 1716 <ul class="styled marginLeft30"> 1717 <li> 1718 <p>The categories and specific pieces of personal information we have collected about you</p> 1719 </li> 1720 <li> 1721 <p>The categories of sources from which we collected the personal information</p> 1722 </li> 1723 <li> 1724 <p>The business or commercial purpose for which we collected or sold the personal information </p> 1725 </li> 1726 <li> 1727 <p>The categories of third parties with whom we shared the personal information</p> 1728 </li> 1729 <li> 1730 <p>The categories of personal information about you that we sold or disclosed for a business purpose, 1731 and the categories of third parties to whom we sold or disclosed that information for a business 1732 purpose</p> 1733 </li> 1734 </ul> 1735 </ul> 1736 <ul class="styled marginLeft30"> 1737 <li> 1738 <p><strong>Correction:</strong> You have the right to request that we correct certain personal information 1739 we have collected, taking into account the nature of the personal information and the purposes of the 1740 processing of the personal information. If you make a correction request, we may correct or instead 1741 delete information as allowed by law. Exceptions apply.</p> 1742 </li> 1743 <li> 1744 <p><strong>Deletion:</strong> You have the right to request that we delete certain personal information we 1745 have collected from you. Exceptions apply.</p> 1746 </li> 1747 <li> 1748 <p><strong>Opt-Out of Sale:</strong> You have the right to opt-out of the sale of your personal information. 1749 </p> 1750 </li> 1751 </ul> 1752 <h5>15.2.6 How to Submit a Request</h5> 1753 <ul class="styled marginLeft30"> 1754 <li> 1755 <p>Submit an access 1756 request by emailing <a href="mailto:[email protected]">[email protected]</a> with 1757 the subject line "[applicable state] Rights Request," or via webform</p> 1758 <ul class="styled marginLeft30"> 1759 <li> 1760 <p>The report you receive containing personal information we have on file will provide instructions 1761 on how to pursue correction of applicable information.</p> 1762 </li> 1763 <li> 1764 <p>Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer 1765 request's receipt. The response we provide will also explain the reasons we cannot comply with a 1766 request, if applicable </p> 1767 </li> 1768 </ul> 1769 </li> 1770 </ul> 1771 <ul class="styled marginLeft30"> 1772 <li> 1773 <p>Submit a deletion 1774 request by emailing <a href="mailto:[email protected]">[email protected]</a> with 1775 the subject line "[applicable state] Rights Request," or via webform</p> 1776 </li> 1777 </ul> 1778 <p><span style="text-decoration:underline"><strong>California Residents</strong></span></p> 1779 <ul class="styled marginLeft30"> 1780 <li> 1781 <p><strong>
1781Limit the Use or Disclosure of Sensitive Personal Information. </strong>You have the right to 1782 request that we limit our use or disclosure of Sensitive Personal Information (as defined by California 1783 law) about you to certain uses authorized by the CCPA. We do not disclose Sensitive Personal Information 1784 beyond such authorizations.</p> 1785 </li> 1786 <li> 1787 <p><strong>Do Not Share My Personal Information. </strong>You have the right to opt out of our sharing of 1788 personal information for cross-context behavioral advertising.</p> 1789 </li> 1790 <li> 1791 <p><strong>Shine the Light Request:</strong> You also may have the right to request that we provide you with 1792 (a) a list of certain categories of personal information we have disclosed to third parties for their 1793 direct marketing purposes during the immediately preceding calendar year and (b) the identity of those 1794 third parties. To submit a Shine the Light Request, email us <a 1795 href="mailto:[email protected]">[email protected]</a> with the subject line "California 1796 Rights Request," or via webform</p> 1797 </li> 1798 </ul> 1799 <p><span style="text-decoration:underline"><strong>Colorado Residents</strong></span></p> 1800 <ul class="styled marginLeft30"> 1801 <li> 1802 <p><strong>Opt Out of Targeted Advertising:</strong> You have the right to opt out of "Targeted 1803 Advertising."</p> 1804 </li> 1805 <li> 1806 <p><strong>Appeal a Refusal to Take Action</strong>: Colorado law requires that we establish a process for a 1807 consumer to appeal our refusal to take action on certain requests. If you are not satisfied with the 1808 outcome of that process, you may <a target="_blank" rel="noopener noreferrer" 1809 href="https://coag.gov/">contact the Colorado Attorney General</a> 1810 to submit a complaint.</p> 1811 </li> 1812 <li> 1813 <p><strong>Other Options not Relevant</strong>: We do not use your data for the purpose of profiling to make 1814 decisions that would have legal or similarly significant effects on you. We do not knowingly process 1815 "<strong>sensitive data</strong>" concerning Colorado residents, as defined under Colorado law, unless 1816 required as a matter of law.</p> 1817 </li> 1818 </ul> 1819 <p><span style="text-decoration:underline"><strong>Connecticut Residents</strong></span></p> 1820 <ul class="styled marginLeft30"> 1821 <li> 1822 <p><strong>Opt Out of Targeted Advertising:</strong> You have the right to opt out of "Targeted 1823 Advertising."</p> 1824 </li> 1825 <li> 1826 <p><strong>Appeal a Refusal to Take Action</strong>: Connecticut law requires that we establish a process 1827 for a consumer to appeal our refusal to take action on certain requests. If you are not 1828 satisfied with the outcome of that process, you may <a href="https://portal.ct.gov/AG">contact the 1829 Connecticut Attorney General</a> to submit a complaint.</p> 1830 </li> 1831 </ul> 1832 <p><span style="text-decoration:underline"><strong>Nevada Residents</strong></span></p> 1833 <ul class="styled marginLeft30"> 1834 <li> 1835 <p><strong>Opt Out of the Sale of Personal Information. </strong>You have the right to request that we not 1836 sell your Personal Information (as defined by Nevada law) for monetary consideration to certain other 1837 parties. This right applies even if your Personal Information is not currently being sold. </p> 1838 </li> 1839 </ul> 1840 <p><span style="text-decoration:underline"><strong>Utah Residents</strong></span></p> 1841 <ul class="styled marginLeft30"> 1842 <li> 1843 <p><strong>Opt Out of Targeted Advertising:</strong> You have the right to opt out of "Targeted 1844 Advertising."</p> 1845 </li> 1846 <li> 1847 <p><strong>Other Options not Relevant. </strong>We do not sell personal information as 1848 "<strong>sale</strong>" is defined under Utah law.</p> 1849 </li> 1850 </ul> 1851 <p><span style="text-decoration:underline"><strong>Virginia Residents</strong></span></p> 1852 <ul class="styled marginLeft30"> 1853 <li> 1854 <p><strong>
1854Opt Out of Targeted Advertising:</strong> You have the right to opt out of "Targeted 1855 Advertising."</p> 1856 </li> 1857 <li> 1858 <p><strong>Appeal a Refusal to Take Action:</strong> Virginia law requires that we establish a process for a 1859 consumer to appeal our refusal to take action on certain requests. If you are not satisfied 1860 with the outcome of that process, you may <a target="_blank" rel="noopener noreferrer" 1861 href="https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint">contact the 1862 Virginia Attorney General</a> to submit a complaint.</p> 1863 </li> 1864 <li> 1865 <p><strong>Other Options not Relevant. </strong>We do not sell personal information as 1866 "<strong>sale</strong>" is defined under Virginia law. We do not knowingly process "<strong>sensitive 1867 data</strong>" concerning Virginia residents, as defined under Virginia law, unless required as a 1868 matter of law.</p> 1869 </li> 1870 </ul> 1871 <h5>15.2.7 Verifying Requests</h5> 1872 <p>Making a verifiable consumer request does not require you to create an account with us. However, we do consider 1873 requests made through your password protected or otherwise authenticated account sufficiently verified when the 1874 request relates to Personal Information associated with that specific account. If you request access to or
1875 deletion of your personal information and do not sign in to an account with us, we require you to provide the 1876 following information: name, email address, phone number, and postal address. In addition, if you do not have an 1877 account and you ask us to provide you with specific pieces of personal information, we reserve the option to 1878 require you to sign a declaration under penalty of perjury that you are the consumer whose personal information 1879 is the subject of the request.</p> 1880 <h5>15.2.8 Authorized Agents</h5> 1881 <p>California residents may designate an authorized agent to exercise your rights under the CCPA on your behalf, 1882 however we may deny a request as permitted by the CCPA. To designate an authorized agent, you must provide the 1883 agent, and the agent must present to us, written permission signed by you. We may also require you to verify 1884 your identify directly with us and directly confirm with us that you provided the authorized agent permission to 1885 submit the request, unless your authorized agent provides us with power of attorney pursuant to Probate Code 1886 sections 4121-4130.</p> 1887 <h5>15.2.9 Additional Information</h5> 1888 <p>If you choose to exercise any of your rights, you have the right not to receive, and will not receive, 1889 discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to 1890 comply with your request. Employees and contractors are provided notice via different statements. </p> 1891 <h5>15.2.10 Other California Privacy Rights</h5> 1892 <p>California's "<strong>Shine the Light</strong>" law (Civil Code Section § 1798.83) permits Members who are 1893 California residents to request and obtain from us once a year, free of charge, certain information about the 1894 Personal Data (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar 1895 year. If applicable, this information would include a list of the categories of Personal Data that was shared 1896 and the names and addresses of all third parties with which we shared information in the immediately preceding 1897 calendar year. If you are a California resident and would like to make such a request, please submit your 1898 request in writing to <a href="mailto:[email protected]">[email protected]</a>.</p> 1899 <p>The "<strong>Do Not Track</strong>" disclosure can be found above in Section 5 entitled Expensify Cookie Policy 1900 and Use of Tracking Technologies.</p> 1901 <h4>15.3 Additional Disclosures for Australian Residents </h4> 1902 <p>If you are in Australia, our collection, storage, use and disclosure of your Personal Data will be subject to 1903 this Privacy Policy and the Privacy Act 1988 (Cth) (Privacy Act). Any part of this Privacy Policy that is 1904 illegal, unenforceable or inconsistent with the Privacy Act may be severed from this Privacy Policy and the 1905 remaining terms or parts of the term of this Privacy Policy will continue in force. In addition, the following 1906 information applies to you.</p> 1907 <h4>15.4 Pseudonymity</h4> 1908 <p>If you are making a general enquiry only, you may deal with us through the use of a pseudonym. However, we will 1909 not be able to provide you with any specific information about your account if you fail to identify yourself to 1910 us. </p> 1911 <h4>15.5 Data Transfer Disclosure</h4> 1912 <p>Personal Data provided to us by Members or Corporate Members located in Australia may be disclosed to service 1913 providers located outside Australia, including in the US, including providers of cloud or other types of 1914 networked or electronic storage.</p> 1915 <p>Although these third parties are subject to privacy and confidentiality obligations imposed by contract or the 1916 regulatory frameworks of the jurisdiction in which those third parties are located, you acknowledge that:</p> 1917 <ul class="styled marginLeft30"> 1918 <li> 1919 <p>they may not always comply with those obligations, or those obligations may differ from the obligations 1920 imposed by privacy and data protection legislation in your jurisdiction; and</p> 1921 </li> 1922 <li> 1923 <p>the third party may be subject to foreign laws which might compel further disclosures of personal 1924 information (e.g. to government authorities). </p> 1925 </li> 1926 </ul> 1927 <h4>15.6 Secondary Purpose</h4> 1928 <p>You acknowledge that we may use or disclose your Personal Data for a reason other than the reasons set forth in 1929 Section 6 or Section 7 (a "<strong>secondary purpose</strong>") where the secondary purpose is connected to or 1930 associated with a purpose for collection set out in this Privacy Policy, or directly connected to or associated 1931 with a purpose for collection if the information is "<strong>sensitive information</strong>" as that term is 1932 defined under the Privacy Act. </p> 1933 <h3>16. Queries, Concerns, and Complaints</h3> 1934 <p>
1934If you have any queries, concerns or complaints about the manner in which we have collected, stored, used or 1935 disclosed your personal information, please contact the Data Protection Officer at <a 1936 href="mailto:[email protected]">[email protected]</a>. We will treat your complaint confidentially 1937 and, after investigating your complaint, discuss the ways in which we can remedy the situation. We will ensure 1938 that we respond to your complaint within a reasonable time (and in any event within the time required by 1939 applicable law).</p> 1940 <p>If your inquiries or complaints regarding our Privacy Policy or use of data that have not been resolved to your 1941 satisfaction within 30 days via the means set forth herein, please contact:</p> 1942 <ul class="styled marginLeft30"> 1943 <li> 1944 <p>The <a target="_blank" rel="noopener noreferrer" href="https://www.oaic.gov.au/">Office of Australian 1945 Information Commissioner</a> (if you are an 1946 Australia individual);</p> 1947 </li> 1948 <li> 1949 <p>The <a target="_blank" rel="noopener noreferrer" href="https://ico.org.uk/make-a-complaint/">Information 1950 Commissioner's Office</a> (if you are a 1951 United Kingdom individual);</p> 1952 </li> 1953 <li> 1954 <p>These <a target="_blank" rel="noopener noreferrer" 1955 href="https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-are-data-protection-authorities-dpas_en">EEA 1956 offices</a> (if you are a European Union individual); or </p> 1957 </li> 1958 <li> 1959 <p>The <a target="_blank" rel="noopener noreferrer" 1960 href="https://reportfraud.ftc.gov/assistant">Federal Trade Commission</a> (if 1961 you are a United States individual). </p> 1962 </li> 1963 </ul> 1964 <p>We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this 1965 Privacy Policy. If you have any questions about this Privacy Policy or our privacy practices, please contact our 1966 DPO at <a href="mailto:[email protected]">[email protected]</a>.</p> 1967 <br> 1968 <div><a href="//privacy.trustarc.com/privacy-seal/validation?rid=c36c3001-c900-4fd9-a736-67a4cb4c4602" 1969 target="_blank"><img style="border: none" 1970 src="//hostedseal.trustarc.com/privacy-seal/seal?rid=c36c3001-c900-4fd9-a736-67a4cb4c4602" 1971 alt="TRUSTe Verified Privacy, Powered by TrustArc" /></a></div> 1972</div> 1973 1974 <div class="page-footer"> 1975 <div class="page-footer__wrapper"> 1976 <div class="columns"> 1977 <div class="column"> 1978 <h3>Features</h3> 1979 <ul> 1980 <li> 1981 <a href="https://use.expensify.com/expense-management" alt="Expense Management" target="_blank" 1982 rel="noopener noreferrer">Expense Management</a> 1983 </li> 1984 <li> 1985 <a href="https://use.expensify.com/spend-management" alt="Spend Management" target="_blank" 1986 rel="noopener noreferrer">Spend Management</a> 1987 </li> 1988 <li> 1989 <a href="https://use.expensify.com/expense-reports" alt="Expense Reports" target="_blank" 1990 rel="noopener noreferrer">Expense Reports</a> 1991 </li> 1992 <li> 1993 <a href="https://use.expensify.com/company-credit-card" alt="Company Credit Card" 1994 target="_blank" rel="noopener noreferrer">Company Credit Card</a> 1995 </li> 1996 <li> 1997 <a href="https://use.expensify.com/receipt-scanning-app" alt="Receipt Scanning App" 1998 target="_blank" rel="noopener noreferrer">Receipt Scanning App</a> 1999 </li> 2000 <li> 2001 <a href="https://use.expensify.com/bills" alt="Bill Pay" target="_blank" 2002 rel="noopener noreferrer">Bill Pay</a> 2003 </li> 2004 <li> 2005 <a href="https://use.expensify.com/invoices" alt="Invoicing" target="_blank" 2006 rel="noopener noreferrer">Invoicing</a> 2007 </li> 2008 <li> 2009 <a href="https://use.expensify.com/payroll" alt="Payroll" target="_blank" 2010 rel="noopener noreferrer">Payroll</a> 2011 </li> 2012 <li> 2013 <a href="https://use.expensify.com/travel" alt="Travel" target="_blank" 2014 rel="noopener noreferrer">Travel</a> 2015 </li> 2016 </ul> 2017 </div> 2018 <div class="column"> 2019 <h3>Resources</h3> 2020 <ul> 2021 <li> 2022 <a href="https://use.expensify.com/accountants" alt="ExpensifyApproved!" target="_blank" 2023 rel="noopener noreferrer">ExpensifyApproved!</a> 2024 </li> 2025 2026 <li> 2027 <a href="https://use.expensify.com/press-kit" alt="Press Kit" target="_blank" 2028 rel="noopener noreferrer">Press Kit</a> 2029 </li> 2030 <li> 2031 <a href="https://use.expensify.com/support" alt="Support" target="_blank" 2032 rel="noopener noreferrer">Support</a> 2033 </li> 2034 <li> 2035 <a href="https://help.expensify.com/" alt="ExpensifyHelp" target="_blank" 2036 rel="noopener noreferrer">ExpensifyHelp</a> 2037 </li> 2038 <li> 2039 <a href="/terms" alt="Terms">Terms of Service</a> 2040 </li> 2041 <li> 2042 <a href="/privacy" alt="Privacy">Privacy</a> 2043 </li> 2044 </ul> 2045 </div> 2046 <div class="column"> 2047 <h3>Learn more</h3> 2048 <ul> 2049 <li> 2050 <a href="https://we.are.expensify.com/how-we-got-here" alt="About Expensify" target="_blank" 2051 rel="noopener noreferrer">About Expensify</a> 2052 </li> 2053 <li> 2054 <a href="https://blog.expensify.com/" alt="Blog" target="_blank" 2055 rel="noopener noreferrer">Blog</a> 2056 </li> 2057 <li> 2058 <a href="https://we.are.expensify.com/" alt="Jobs" target="_blank" 2059 rel="noopener noreferrer">Jobs</a> 2060 </li> 2061 <li> 2062 <a href="https://www.expensify.org" alt="Expensify.org" target="_blank" 2063 rel="noopener noreferrer">Expensify.org</a> 2064 </li> 2065 <li> 2066 <a href="https://ir.expensify.com" alt="Investor Relations" target="_blank" 2067 rel="noopener noreferrer">Investor Relations</a> 2068 </li> 2069 </ul> 2070 2071 <div class="page-footer__social-icons"> 2072 <a href="https://we.are.expensify.com/podcast" title="Podcast" 2073 class="social-media-link expensicons expensicons-podcast" target="_blank" 2074 rel="noopener noreferrer"></a> 2075 <a href="https://www.twitter.com/expensify" title="Twitter" 2076 class="social-media-link expensicons expensicons-twitter" target="_blank" 2077 rel="noopener noreferrer"></a> 2078 <a href="http://www.instagram.com/expensify" title="Instagram" 2079 class="social-media-link expensicons expensicons-instagram" target="_blank" 2080 rel="noopener noreferrer"></a> 2081 <a href="https://www.facebook.com/expensify" title="Facebook" 2082 class="social-media-link expensicons expensicons-facebook" target="_blank" 2083 rel="noopener noreferrer"></a> 2084 <a href="http://www.linkedin.com/company/expensify" title="LinkedIn" 2085 class="social-media-link expensicons expensicons-linkedin" target="_blank" 2086 rel="noopener noreferrer"></a> 2087 </div> 2088 </div> 2089 <div class="column"> 2090 <h3>Get Started</h3> 2091 <ul> 2092 <li> 2093 <a href="/signup" alt="Create a new account"> 2094 Create a new account</a> 2095 </li> 2096 2097 <li> 2098 <a href="/signin" alt="Log in">Log in</a> 2099 </li> 2100 </ul> 2101 <p class="page-footer__fine-print"> 2102 ©2008-2026 Expensify, Inc. 2103 </p> 2104 <p class="page-footer__fine-print">Money transmission services are provided by our partners, 2105 which includes Expensify Payments LLC (NMLS ID: 2017010), 2106 pursuant to its <a href="https://use.expensify.com/licenses" target="_blank" rel="noreferrer noopener">licenses</a>, 2107 as well as other third parties. See the <a href="/paymentsentities">Terms of Service</a> for a complete list of providers. 2108 </p> 2109 </div> 2110 </div> 2111 2112 <div class="page-footer__logo"> 2113 <img src=https://d2k5nsl2zxldvw.cloudfront.net/images/homepage/expensify-footer-logo-green.svg alt="Expensify" /> 2114 </div> 2115 </div> 2116</div> 2117 </div> 2118 </div> 2119 </div> 2120 2121 <div id="dialog_overlay"></div> 2122 <div id="reports_popup_user_menu" class="reports_popup right_align hidden"> 2123 <div class="reports_popup_inner_tb">
2124 <span class="submenuheader"> 2125 <div class="userPictureLarge"> 2126 <div class="changePicture js_changePicture">Change</div> 2127 </div> 2128 <p class="userEmail selectable"> 2129 <span id="userHandleWelcomeMessage" class="userSubtext">Welcome back,</span> 2130 <strong><span id="userHandleDisplay" class="nomargin"></span></strong> 2131 <span id="userHandleEmailSubtext" class="userSubtext hidden"></span> 2132 </p> 2133 <div class="marginTop js_signout"> 2134 <a href="/signout"> 2135 <span class="expensicons expensicons-switch expensicons-sm depreciated vAlignMiddle inlineBlock"></span> 2136 <span class="vAlignMiddle inlineBlock">Sign Out</span> 2137 </a> 2138 </div> 2139 <div class="marginTop" id="delegateReturnHome"> 2140 <a href="#"> 2141 <span class="expensicons expensicons-switch expensicons-sm depreciated vAlignMiddle inlineBlock"></span> 2142 <span class="vAlignMiddle inlineBlock">Return to your account</span> 2143 </a> 2144 </div> 2145 </span> 2146 2147 <div id="delegatedAccessContainer"> 2148 <div class="link label">Copilot access:</div> 2149 <div id="delegateAccessList"></div> 2150 </div> 2151 2152 <div class="link js_help-feedback"> 2153 <span class="expensicons expensicons-question-mark-circle expensicons-sm depreciated floatLeft marginRight5"></span> 2154 <a href="#">Help and Feedback</a> 2155 </div> 2156 2157 <!-- <div class="link js_changePicture"><a href="#">Change your Profile Picture with Gravatar</a></div> --> 2158 2159 <div id="activePolicySelectorContainer" class="hidden"> 2160 <div class="link label">Use this expense workspace:</div> 2161 <div id="activePolicyList"></div> 2162 </div> 2163 </div> 2164</div> 2165
2165<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-vendor.f0efce8e.js.gz"></script>
2165 2166
2166<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-shared.d0926c23.js.gz"></script>
2166 2167
2167<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-expensify.ee711d18.js.gz"></script>
2167 2168
2168<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-external.4c1f4e2f.js.gz"></script>
2168 2169
2169<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-deprecated.495f0226.js.gz"></script>
2169 2170
2170<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-lib.151be898.js.gz"></script>
2170 2171
2171<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-class.54c03fc7.js.gz"></script>
2171 2172
2172<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-mixin.d41d8cd9.js.gz"></script>
2172 2173
2173<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-component.57daf363.js.gz"></script>
2173 2174
2174<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-app.a849c4b8.js.gz"></script>
2174 2175
2175<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/module-homepage.a8ba1a72.js.gz"></script>
2175 2176
2176<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/mcc.db237005.js.gz"></script>
2176 2177
2177<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/currencyInfo.6fb7cd92.js.gz"></script>
2177 2178
2178<script type="text/javascript" src="https://d2k5nsl2zxldvw.cloudfront.net/dist/js-gz/waf.b736be1c.js.gz"></script>
2178 2179
2179<script type="text/javascript" src="https://www.expensify.com/newjs/banklist.php"></script>
2179 2180
2180<script id="primer" type="text/javascript"> 2181 $('#primer').remove(); 2182 </script>
2182 2183
2183<script type="text/javascript"> 2184 DEBUG = 0; 2185 ENVIRONMENT = 'production'; 2186 </script>
2186 2187
2187<script> 2188 $(document).ready(function () { 2189 var desktop = window.matchMedia('(min-width: 760px)'); 2190 2191 function updateInert($group) { 2192 var collapsed = desktop.matches && !$group.hasClass('is-expanded'); 2193 $group.find('.nav-group__items').prop('inert', collapsed); 2194 } 2195 2196 function updateAllInert() { 2197 $('.nav-group').each(function () { updateInert($(this)); }); 2198 } 2199 2200 // Mark groups containing the current page as expanded 2201 $('.nav-group.has-current').addClass('is-expanded') 2202 .find('.nav-group__toggle').attr('aria-expanded', 'true'); 2203 2204 // Skip focus on links inside collapsed nav groups (desktop only â mobile shows all) 2205 updateAllInert(); 2206 desktop.addEventListener('change', updateAllInert); 2207 2208 // Toggle collapse/expand on section header click 2209 $('.nav-group__toggle').on('click', function () { 2210 var $group = $(this).closest('.nav-group'); 2211 var isExpanded = $group.hasClass('is-expanded'); 2212 $group.toggleClass('is-expanded'); 2213 $(this).attr('aria-expanded', !isExpanded); 2214 updateInert($group); 2215 }); 2216 2217 // Scroll the current menu item into view 2218 var pathName = window.location.pathname; 2219 var $targetMenuItem = pathName 2220 ? $('.tertiary-nav a[href="' + pathName + '"]') 2221 : $(); 2222 2223 if (!$targetMenuItem.length) {
2224 $targetMenuItem = $('.tertiary-nav a').first(); 2225 } 2226 2227 if ($targetMenuItem.length) { 2228 $targetMenuItem[0].scrollIntoView({ 2229 behavior: 'smooth', 2230 inline: 'center', 2231 block: 'nearest' 2232 }); 2233 } 2234 }); 2235 </script>
2235 2236 2237
2237<script>(function(){function c(){var b=a.contentDocument||(a.contentWindow&&a.contentWindow.document);if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'a3ffe2d70a1e1c6b',t:'MTc5MDIzMjk1Mw=='};var a=document.createElement('script');a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange||function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();</script>
2237</body> 2238</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.