Your privacy matters.

01

About This Policy

Expenia is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, hold, use, and disclose your personal information. By using our website or Service, you consent to the practices described in this policy. This policy was last updated in June 2026.

02

What Personal Information We Collect

• Contact details: name, email address, phone number
• Business information: business name, business type, industry
• Account details: username, password (encrypted), subscription plan
• Financial data you input into the Service (e.g., expenses, invoices)
• Usage and analytics data: pages visited, features used, device and browser information
• Communications: any messages or content you send to us

03

How We Collect Your Information

• Directly from you when you register, complete a contact form, or subscribe to communications
• Automatically through cookies, analytics tools, and server logs when you use our website
• From payment processors when you subscribe to a paid plan
• From third-party integrations you authorise to connect with your account

04

Why We Collect Your Information

• To provide, operate, and improve the Expenia Service
• To create and manage your account
• To process payments and manage subscriptions
• To respond to enquiries and provide customer support
• To send product updates, security notices, and marketing communications (with your consent)
• To comply with our legal obligations and prevent fraud or misuse

05

Disclosure to Third Parties

We do not sell your personal information. We may disclose personal information to trusted third-party service providers who assist us in operating the Service, including hosting providers, payment processors, analytics platforms, and email delivery services. These providers are bound by confidentiality obligations and are not permitted to use your information for their own purposes. We may also disclose information to regulators, law enforcement, or courts where required by law.

06

Overseas Disclosure

Some of our third-party service providers are located outside Australia, including in the United States and European Union. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure the recipient handles that information consistently with the Australian Privacy Principles. By using our Service, you acknowledge that your information may be stored or processed overseas.

07

Data Security

We implement reasonable technical and organisational security measures to protect your personal information from unauthorised access, modification, disclosure, or loss. These include encrypted data storage, secure communications (HTTPS), and access controls. However, no internet-based system is completely secure. If you suspect a security incident affecting your account, please contact us immediately at expenia.com.au/contact.

08

Data Retention

We retain your personal information for as long as necessary to provide the Service and meet our legal obligations. Account data is retained for the duration of your account and for a reasonable period after closure (typically up to 12 months) unless earlier deletion is requested. Financial data you input is retained for the period required by applicable Australian law. When data is no longer required, we securely delete or de-identify it.

09

Your Rights: Access, Correction, and Deletion

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to request access to personal information we hold about you, to request correction of inaccurate or outdated information, and in certain circumstances, to request deletion of your personal information. To exercise these rights, contact us at expenia.com.au/contact. We will respond within 30 days. We may need to verify your identity before processing your request.

10

Cookies and Analytics

Our website uses cookies and third-party analytics tools, including Google Analytics and Microsoft Clarity, to understand how visitors use our site and to improve user experience. Cookies are small text files stored on your device. You can manage cookie preferences through the consent banner displayed on your first visit, or by adjusting your browser settings. Declining analytics cookies does not affect your ability to use the Service.

11

Marketing Communications

We may send you marketing emails about Expenia products and features if you have subscribed or consented to receive them. Each marketing email contains an unsubscribe link. You can also update your communication preferences at any time by contacting us. We comply with the Spam Act 2003 (Cth) and will not send unsolicited commercial electronic messages.

12

Privacy Complaints

If you believe we have handled your personal information in a way that does not comply with the Australian Privacy Principles, you may lodge a complaint with us by contacting expenia.com.au/contact. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

13

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice on our website before the changes take effect. The current version of this policy is always available at expenia.com.au/privacy.

14

Contact Our Privacy Officer

For any privacy-related questions, requests, or complaints, please contact us via expenia.com.au/contact. We treat all privacy enquiries seriously and will respond as promptly as possible.