Privacy Policy

Introduction

At Ingrid, we are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Ingrid platform.

Information We Collect

Account Information

• Name, email address, and contact details
• Company information and business details
• User credentials and authentication data
• Profile preferences and settings

Business Data

• Expense reports and receipt images
• Invoice and document uploads
• Timecard and payroll information
• Customer and vendor records
• Integration data from third-party accounting systems

Usage Information

• Platform interaction logs and analytics
• AI chat conversations and queries
• Feature usage patterns and preferences
• Device information and IP addresses

How We Use Your Information

We use your information to:

• Provide and maintain the Ingrid platform services
• Process expenses, invoices, and business documents using AI
• Integrate with your accounting systems
• Improve AI accuracy and platform features
• Send service notifications and updates
• Provide customer support and respond to inquiries
• Ensure platform security and prevent fraud
• Comply with legal obligations

Data Security

We implement industry-leading security measures to protect your data:

• End-to-end encryption for data in transit and at rest
• Multi-tenant row-level security (RLS) isolation
• SOC 2 Type II compliant infrastructure
• Regular security audits and penetration testing
• Role-based access control (RBAC) and permission management
• Comprehensive audit trails for all data access
• Secure cloud hosting on enterprise-grade infrastructure

Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• With Your Consent: When you authorize data sharing
• Service Providers: Trusted third-party vendors who assist in platform operations (AI services, cloud hosting, analytics)
• Accounting Integrations: Data synchronized with your accounting systems as configured
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data at any time, subject to legal retention requirements.

Your Rights

You have the right to:

• Access and review your personal information
• Correct inaccurate or incomplete data
• Request deletion of your data (right to be forgotten)
• Export your data in a portable format
• Opt-out of marketing communications
• Withdraw consent for data processing
• File a complaint with data protection authorities

Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and maintain session security. You can control cookie preferences through your browser settings.

Children's Privacy

Ingrid is a business platform not intended for children under 13. We do not knowingly collect information from children. If you believe we have inadvertently collected such data, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the platform. Continued use of Ingrid after changes constitutes acceptance of the updated policy.