EFFECTIVE 27 SEPTEMBER 2026

Privacy Notice

This notice explains how Timastra LLC processes information through Timastra Expenses to provide secure, organization-isolated project-fund and liquidation workspaces.

Information processed

We process account and organization details, workspace roles, project and deposit records, expense and supplier information, receipt files, audit events, security logs, subscription identifiers, and messages needed for verification, invitations, and account recovery.

Why it is processed

Information is used to authenticate users, provide requested features, isolate tenant data, generate reports, secure and troubleshoot the service, prevent abuse, communicate account events, administer subscriptions, and meet legal obligations.

Sharing and service providers

Information may be handled by infrastructure, email-delivery, payment, monitoring, and backup providers acting on our instructions. Payment-card details are processed by the payment provider and are not stored in Timastra Expenses. We may disclose information when legally required or to protect users and the service.

Current service-provider categories: VPS hosting provider, Resend, Paddle.

Retention and security

Production data is hosted in Singapore. Workspace data is retained while the service is provided and for up to 365 days afterward unless a longer legal hold applies. Backup copies age out under the same documented schedule. Timastra Expenses uses role-based access, tenant-scoped queries, encrypted transport in production, password hashing, session controls, and audit logging. No system can guarantee absolute security.

Your choices

Workspace administrators can manage members and records. Depending on applicable law, individuals may request access, correction, deletion, restriction, or portability through the organization that controls their workspace or by contacting [email protected].

Deleting your account and data

To delete your Timastra Expenses account and the personal data linked to it, email [email protected] from the address on your account with the subject “Delete my Timastra Expenses data”. If your organization’s administrator controls your workspace, you can also ask them to remove you; they can delete members and records directly.

We verify each request before acting on it and complete verified requests within 30 days. Your sign-in, profile and personal details are deleted. Records your organization must keep for accounting, audit, or legal reasons, such as approved liquidations and the audit trail, stay with that organization. Backup copies age out within 365 days.

To close a whole workspace, an administrator can export the organization’s data first and then ask us to delete the workspace. Its data is removed from the live service and ages out of backups on the same schedule.

International processing and updates

Service providers may process data where they operate, subject to applicable safeguards. Material changes to this notice should be communicated and a new policy version recorded when users accept them.

Privacy requests are verified before fulfillment. Legal retention, fraud prevention, accounting, and security obligations may limit or delay deletion of particular records.