Privacy policy

This policy covers Crawlink Expense at https://expense.crawlink.com, operated by Crawlink Networks Private Limited. It is written to be read rather than to be comprehensive-sounding.

What we store

• Your identity. When you sign in with Google we receive and store your Google account id, email address, name and profile picture URL. We never see your Google password.
• What you record. The expenses, income, parties, categories, tags and notes you enter, and any bills or receipts you attach.
• Sessions. A row per signed-in device holding a hashed session token, the browser's user agent and the IP address the sign-in came from, so you can be signed out and so we can tell a session apart from an attacker's.

There is no analytics script, no advertising pixel and no third-party tracker on any page of this site or the app.

Where it lives

On Cloudflare's network. Identity and organisation membership sit in a Cloudflare D1 database; each organisation's entries live in a separate database of their own, so one organisation's data is not merely filtered away from another's but physically apart. Attached bills are stored as files in Cloudflare R2.

Who can see it

Members of an organisation can see everything recorded in that organisation, including bills. Nobody outside it can — attachments require a signed-in member, so a copied link does not work for anyone else. We do not sell data, and we do not share it with anyone except where the law requires it.

How long we keep it

Until you delete it. Deleting an entry deletes its attachments. Deleting an organisation destroys its database and its files. Deleting your account, from Profile → Danger zone, removes your user record and sessions and destroys every organisation you are the only administrator of; organisations with another administrator are transferred to them instead. We keep a tombstone row recording that an organisation was deleted, when, and by whom — it contains the organisation's name but none of its contents.

Cookies

One cookie, expense_session, which holds a random session token and nothing else. It is HTTP-only, same-site and set over HTTPS in production. There are no other cookies and no cross-site tracking of any kind.

Your rights

Export any filtered view of your entries to CSV from within the app, and delete your account from Profile → Danger zone — neither needs to go through us. For anything else, email hello@crawlink.com.

Changes

If this policy changes materially we will update the date at the top and say so on the site before the change takes effect.