Privacy Policy
Last updated: August 16, 2026
Sumptus Technologies LLC (“Sumptus,” “we,” “us”) provides an expense-verification platform. This policy explains what data we collect, why, and the choices you have.
1. Information we collect
We collect information you provide directly and information generated as you use the service:
- Account & company data — name, work email, company name, role, and team membership.
- Expense data — receipt images, merchant, amount, date, party size, category, and the text you enter.
- Location data — approximate GPS at the time of capture, used to corroborate that a receipt matches the merchant location. You can decline location access.
- CRM data — when you connect a CRM (Salesforce, HubSpot, Pipedrive), contact, deal, and meeting metadata used to match expenses to relationships.
- Verification responses — a client or counterparty’s yes/no confirmation and its timestamp.
- Usage & device data — app version, device type, and diagnostic logs used to keep the service reliable.
2. How we use information
- To operate the service: capture, score, route, and store expenses and their audit trail.
- To verify expenses by contacting the relevant client or counterparty on your behalf.
- To generate compliance scores and reports against your organization’s policy.
- To secure the platform, prevent fraud, and meet legal obligations.
3. Client verification data
A core feature of Sumptus is independently confirming a meeting with the client or prospect involved. When you submit an expense, we may send that person a one-time request (in-app, email, or SMS) asking them to confirm or deny the meeting. We collect their response and the time it was given. We do not require the recipient to create an account, and we do not use their contact details for marketing.
4. How we share information
- Within your organization — managers, finance, and administrators see the expenses and verification results relevant to their role.
- Service providers — infrastructure, email/SMS delivery, and payment processing partners who process data on our behalf under contract.
- Legal — where required by law or to protect rights and safety.
We do not sell personal information.
5. Data retention
We retain expense and audit-trail records for as long as your organization’s account is active, and thereafter as needed to meet the retention periods your compliance obligations require. You may request deletion subject to those obligations.
6. Security
We encrypt data in transit and at rest, enforce role-based access, and follow the practices described on our Security page. No system is perfectly secure, but we work to protect your data proportionate to its sensitivity.
7. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. To exercise them, contact us and we will respond within the timeframe the applicable law requires.
8. Contact
Questions about this policy or your data? Reach us at info@sumptus.co or via our contact page.
© 2026 Sumptus Technologies LLC