Expense Manager

Privacy Policy

Last updated: July 14, 2026

This Privacy Policy explains how KONSULENCE.AL (“we”, “us”) collects, uses, stores, and protects information when you use the Expense Management System (the “Service”), available at expense.konsulence.al. By using the Service you agree to the practices described here.

1. Information We Collect

  • Account data: name, email address, and authentication credentials (passwords are stored only as one-way hashes; some accounts sign in via Google or Microsoft and have no stored password).
  • Company & expense data: company details, expense reports, advances, categories, amounts, dates, merchants, and any notes you enter.
  • Receipts & attachments: images and documents you upload, including data extracted from them (merchant, amount, tax, fiscal QR data).
  • Technical data: log data and session tokens needed to operate and secure the Service.

2. How We Use Information

We use the information solely to provide and operate the Service: authenticating users, managing expenses and approval workflows, generating reports, scanning receipts, and — where you explicitly connect an integration — exporting accounting data on your behalf.

3. Third-Party Services & Integrations

The Service integrates with third parties only at your direction:

  • Intuit QuickBooks: when you connect QuickBooks Online, we send the expense, bill, and purchase data you choose to export to your QuickBooks company using Intuit’s official API. We store OAuth tokens to maintain the connection. We do not read your QuickBooks data beyond what is needed to perform the export. You can disconnect at any time from the company settings.
  • Google & Microsoft: used only to verify your identity during sign-in (OpenID Connect ID tokens). We receive your name and email; we do not access your mailbox, files, or contacts.
  • Anthropic: when you use AI-assisted receipt scanning, the receipt image is sent to Anthropic’s API to extract structured fields. It is not used to train models.
  • Albanian Tax Authority (tatime.gov.al): fiscal-invoice QR codes may be verified against the official e-fiscalization service.

4. Data Storage & Security

Data is stored on secured servers. Access is protected by authentication and role-based permissions. Passwords are hashed, transport is encrypted with HTTPS/TLS, and API access requires signed tokens. Databases are backed up regularly. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

5. Data Retention

We retain your data for as long as your account and company remain active, and as required to meet legal, accounting, and tax obligations. You may request deletion of your data subject to those obligations.

6. Your Rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw integration consent by disconnecting the relevant service. To exercise these rights, contact us at the address below.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date on this page.

8. Contact

For any question about this Privacy Policy or your data, contact KONSULENCE.AL at kontakt@konsulence.al.