Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your data.
Last updated: 11/4/2026
Information We Collect
Personal Information
- Email address and authentication credentials
- Profile information you provide
- Asset information and descriptions you input
- Receipt images and extracted data (merchant names, amounts, dates)
- Financial transaction data from connected credit cards
- Purchase history and warranty information
- Location data (only with your explicit consent)
Technical Information
- IP address and device information
- Browser type and version
- Usage patterns and preferences
- Cookies and similar technologies
How We Use Your Information
- Provide and maintain our asset management services
- Process and analyze receipt data for expense tracking
- Match receipts to credit card transactions automatically
- Send warranty expiration notifications
- Generate tax reports and depreciation schedules
- Improve and personalize your experience
- Communicate with you about service updates
- Ensure security and prevent fraud
- Comply with legal obligations and tax requirements
Data Security & Encryption
We implement industry-standard security measures to protect your data:
- End-to-end encryption for data transmission (TLS 1.3)
- AES-256 encryption for all data at rest including receipts
- Secure cloud storage with Supabase and Row Level Security
- Receipt images stored with encrypted file system
- Financial data encrypted with additional security layers
- Regular security audits and penetration testing
- Multi-factor authentication for account access
- Automatic encrypted backups with zero-knowledge architecture
- SOC 2 Type II compliant infrastructure
Your Rights (GDPR/CCPA)
Under GDPR (EU residents):
- Right to access your personal data
- Right to rectify inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
Under CCPA (California residents):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information
- Right to non-discrimination
Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
- Account data: Until account deletion or 2 years of inactivity
- Asset information: Until manually deleted by user
- Receipt images and data: 7 years (tax compliance) or until deleted
- Financial transaction data: 7 years (regulatory requirements)
- Usage logs: 12 months for security and analytics
- Backup data: 30 days with automatic deletion
- Deleted data: Permanently removed within 30 days
Cookies & Tracking
We use cookies and similar technologies to enhance your experience:
- Essential cookies for authentication and security
- Functional cookies to remember your preferences
- Analytics cookies to improve our services (with consent)
- You can manage cookie preferences in your browser settings
Contact & Data Requests
To exercise your privacy rights or for any privacy-related questions:
Privacy Officer
Email: privacy@99moons.com
Response time: Within 30 days
This privacy policy is effective as of 11/4/2026 and may be updated periodically.
We will notify you of any material changes via email or app notification.