Privacy Policy

Privacy Policy

This policy applies to (Receipts.house) an initiative from iSpire Solutions Pty Ltd ("Receipts.House", "we", "our" or "us"). We have developed this policy for you, an individual or organisations with whom we interact, whether you are a partner (Individuals, organisations or Banks), a partner’s customer using our Receipts.House, a visitor to our Site, or any combination of the above. It applies to all individuals who deal with us for any business purpose.

This policy is to describe how we collect and use data, including Personal Information, and clarify how we comply with the Australian Privacy Act 1988 (Cth) (“Privacy Act”).

Please note this policy may be updated from time to time to ensure compliance with applicable laws. You can always find the most up-to-date version on our website. Please refer to Appendix 1 for any specific terminology used throughout this policy.

Data privacy is very important to us

Our privacy policy

At House.Receipts, the protection of your data is of utmost importance. This policy reflects our position on data privacy and our commitment to protecting the data and Personal Information we collect.

Your agreement to this policy

By using this Site, our mobile application and/or our services, you agree to the terms and conditions of this Privacy Policy.

Information we may collect, use or disclose

The type of data we may collect, how it is used and who it may be disclosed to vary based on the services you use. This section details the type of data we may collect for the services we offer, how we collect it and how we handle it.

1. Your personal information
   • Name / Address / Email / Phone
2. Your Receipts Data
3. Your Bank transactions

Functions:

• We have provided the ability for the users to house their receipts in the mobile app by a simple click.
• We extract all the receipts data and store that information against your user IDs only.
• Bank addition feature allows AI solution to match and link the receipts with the corresponding transactions.

How we use information

1. We will only use the information collected where we have a legitimate business purpose to do so and in accordance with the contractual terms agreed with our relevant Bank and organisation partners. Below is an outline of the purposes for which we may use the information we collect:
   • to extract Receipts information
   • to perform internal analysis, helping us improve and develop our services
   • to provide organisation and Bank partners with analytics products and insights using anonymised data
   • to conduct general administration of the business (including customer enquires, preparing partners’ invoices, accounting, finance, and internal operations)
   • to monitor and conduct activities related to the security of our informatic systems and services
   • to comply with our legal and regulatory obligations and exercise our legal rights
   • to provide any additional services you have consented to (including additional Receipts integrations with third-party services such as expense and financial management tools).
2. We may disclose the information we collect to the following:
   • Bank or organisation partners for the purpose of building new customer services
   • third-parties you have consented to share information with (including third-parties who provide services integrated with receipts.house such as expense and finance management tools)
   • Merchants that you shop with to access receipts issued on their behalf and de-identified demographic information about customers who transacted with them
   • accountants, auditors, lawyers and other professional advisors we engage who require access to information
   • government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law
   • third-party service providers to whom we may outsource certain organisational functions
   • third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Our Business Partners Privacy Policies:

We use 3rd party service providers for the bank integration services, Please refer to their:

• Privacy Policy @ https://docs.basiq.io/en/articles/382581-basiq-privacy-policy
• CDR Policy @ https://docs.basiq.io/en/articles/5088017-consumer-data-right-cdr-policy
• Data Security Policy @ https://www.basiq.io/data-security/

We use 3rd party service providers for the receipts extraction services, Please refer to their:

• Privacy Policy @ https://www.veryfi.com/privacy/

Where information is collected from Merchant/Business partners, this information is collected electronically using RESTful API technology.

Marketing

• We may, with your consent, use the information we have collected about you to contact you from time to time by email to tell you about new products or services that we believe may be of interest to you, to send you newsletters and to conduct surveys.
• You can withdraw your consent to receiving direct marketing communications from us at any time by unsubscribing from the mailing list by clicking on the link in the marketing communication or contacting us using the details set out below.

Data security and maintaining accuracy

Protecting your privacy and maintaining the accuracy of the data is very important to us. This section details the measures we take to achieve this.

Securing Data

We have implemented appropriate technical and organisational security measures designed to protect your Personal Information against unauthorised or unlawful destruction, loss, alteration, disclosure, and other unlawful or unauthorised forms of Processing. A selection of these measures are listed below:

• System security: when you transact with us on the internet via our Sites or via our partners’ APIs, we encrypt data sent to our systems
• Building security: we have protection in our buildings against unauthorised access such as cameras and access key controls
• Disposal of data which is no longer required: we have defined policies to ensure that we only keep Personal Information for as long as required (for example, to meet user needs, legal requirements or our internal needs). If we no longer need to hold your Personal Information for any reason or we are no longer required by law to keep it, we will take reasonable steps to de-identify or destroy that information. These steps may vary depending on the nature of the information, the way it was collected and how it was stored.
• Staff education: we train and remind our staff of their obligations with regards to your Personal Information

Maintaining Data accuracy

• On an ongoing basis, we take every reasonable step to ensure that:
  o your Personal Information is accurate and has been kept up to date (where necessary)
• From time to time we may ask you to confirm the accuracy of your Personal Information.

Cookies and similar technologies

In some cases, we use cookies or other similar technologies to provide our services to you.

How we use cookies

When you visit our Sites, we may use ‘cookies’ or other similar tracking technologies that help us track your website usage and remember your preferences. Cookies are small files that store information on your computer, mobile phone or other device. They enable the entity that put the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions. While we do not use browsing information to identify you personally, we may record certain information about your use of our Sites, such as which pages you visit, the time and date of your visit, search engine referrals and the internet protocol address assigned to your device.

How you can stop cookies

You can change your cookie settings at any time and can disable cookies through your internet browser. How you do so depends on your browser and the type of cookie. Certain browsers can be set to reject all browser cookies. If you configure your device to block all cookies, you may disrupt certain features and limit the functionality we can provide when you visit or use our Sites. If you use our Sites without changing your settings, you are consenting to our use of cookies.

Web beacons

Our direct marketing communications may contain electronic images, known as web beacons. These electronic images enable us to know if a recipient has opened our communications or visited certain click through links (such as our website). Web beacons are a tool we use to analyse the engagement with our communications and help us improve your experience.

Dealing with us anonymously or using a pseudonym

Where possible and lawful, you may interact with us anonymously. For example, if you contact us with a general question, you are not required to give us your name unless we need it to adequately handle your question. We may need your name, contact information and other details to enable us to provide our services or products to you.

Accessing, updating and correcting your Personal Information

We will endeavour to ensure that the Personal Information collected from you is up to date, accurate and complete. You may request access to, or correction of, the Personal Information we hold about you at any time by contacting us using the details provided below. We will need to verify your identity before responding to your request. Subject to any applicable exceptions or requirements, we will provide you with access to the Personal Information you request within a reasonable time and usually within 30 days. If we decide to refuse your request, we will tell you why in writing and how to complain if you are not satisfied by our response.

Contacting us

If you have any questions regarding this Privacy Policy, our treatment of your Personal Information, complaints, or would like to access or amend your Personal Information, please contact us at info@receipts.house

Complaints

If you contact us to raise a complaint, we will consider your complaint promptly and contact you to seek to resolve the matter. If we’re unable to provide a final response within 45 days, we will contact you to explain why and discuss a timeframe to resolve the complaint. Under the Privacy Act, if you are not satisfied with our response, you are also entitled to make a complaint to the Australian Privacy Commissioner.
For more information about the Australian Privacy Principles, or if we are unable to satisfactorily resolve your concerns about our handling of your Personal Information, you can contact the Office of the Australian Information Commissioner via the OAIC website, www.oaic.gov.au

Appendix 1: Definitions

Bank

Bank means a financial institution that issues credit cards or debit cards, or an entity providing other payment method, to customers and has entered into, and remains a party to, a services agreement with Receipts.House to provide Receipts.House to its customers.

Organisation

Organisation means a person who has entered into, and remains a party to, a services agreement with Receipts.House under which Receipts.House is to create and issue Receipts.House for its customers.

Personal Information

Personal Information means any information or opinion about an identified individual, or an individual who is reasonably identifiable:
• whether the information or opinion is true or not; or
• whether the information or opinion is recorded in a material form or not.

Site

Any related web pages located under the domain name Receipts.House