Privacy Policy

Remizen Inc. ("Remizen," "we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our enterprise expense management platform and related services (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of your information in accordance with this Policy. If you do not agree with these terms, please discontinue use of the Services.

We may collect the following categories of information:

• Account Information — name, business email address, job title, and company name provided at registration or by your employer.
• Usage Data — pages visited, features used, actions taken within the platform, and timestamps.
• Device & Browser Information — IP address, browser type and version, operating system, and device identifiers.
• Financial Data — expense amounts, merchant names, receipts, and reimbursement information submitted through the platform on behalf of your employer.

We use the information we collect to:

• Provide, operate, and continuously improve the Services.
• Process expense submissions and reimbursement transactions.
• Send transactional communications such as approval notifications, payment confirmations, and security alerts.
• Detect, prevent, and respond to fraud, abuse, or security incidents.
• Comply with applicable legal obligations and enforce our Terms of Use.
• Generate aggregated, anonymized analytics to understand product usage and improve platform performance.

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following limited circumstances:

• Service Providers — trusted vendors who assist in operating our platform (e.g., Stripe for payment processing, cloud infrastructure providers, email delivery services), each bound by confidentiality obligations.
• Your Employer — as a business platform, expense and reimbursement data is visible to authorized members of your organization (managers, finance, administrators) per your company's configured roles.
• Legal Requirements — when required by law, regulation, or valid legal process.

We employ industry-standard technical and organizational safeguards to protect your information, including:

• TLS/HTTPS encryption for all data in transit.
• Encryption at rest for sensitive financial and personal data.
• Role-based access controls ensuring employees can only access data appropriate to their permissions.
• Regular security reviews and vulnerability assessments.

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to use strong, unique passwords and to notify us immediately of any suspected unauthorized access.

We retain personal information for as long as necessary to provide the Services and fulfill the purposes described in this Policy, or as required by law. Expense and financial records may be retained for longer periods to comply with audit, tax, and regulatory requirements.

When data is no longer needed, we delete or anonymize it in accordance with our data retention schedules. You may request earlier deletion subject to applicable legal obligations — see Your Rights below.

Depending on your location, you may have certain rights regarding your personal information, including the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request that we update inaccurate or incomplete information.
• Deletion — request that we delete your personal information, subject to legal retention requirements.
• Portability — request a machine-readable export of your data.

To exercise any of these rights, please contact us using the information below. We will respond within 30 days.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out to us at: