Privacy policy
Effective 2026-10-13. This policy explains how DEEPLINK PTE. LTD. handles information when you use DeepBook.
Who we are
DEEPLINK PTE. LTD. operates DeepBook. Contact deeplink.digital@gmail.com about privacy, access, correction or deletion. Your organization decides which members may access its records; we provide the account and record-management service.
Information and purposes
We process account identifiers, names, job titles, organization membership, permissions, password hashes and sign-in sessions to authenticate you and control access. We process amounts, currencies, dates, categories, projects, notes, claims, cash advances, approval and settlement records, and selected receipt images to provide accounting and reimbursement workflows. Settlement records a payment; it does not move money. We do not need your bank password or full payment card number.
Device and service information
The app stores your language preference and keeps login tokens and deletion receipts in the iOS Keychain. Images you choose through the system photo picker are uploaded as receipts. Exporting and sharing records creates copies you control. Network infrastructure processes IP addresses and request information for security, troubleshooting and service delivery. Login-abuse records expire after the rate-limit window. We do not include an advertising SDK or use data for cross-app advertising tracking.
Access and service providers
Access to organization records is controlled by roles and permissions. Other independent organizations cannot access your records. Platform administration does not provide a business-ledger browsing interface. Authorized infrastructure personnel and service providers may access data only as necessary to operate, secure and maintain the service. We use Amazon Web Services for cloud hosting and Apple services for app distribution and testing. Processing may take place outside your country or region. We do not sell your personal information.
Retention
Account and business records are kept while needed to provide the service and meet an identified legal obligation. We do not treat all accounting history as a reason to retain every personal detail indefinitely. In the live service, deletion request status and minimal identifiers are retained for up to 90 days after completion, to show the result and prevent erased accounts from reappearing after a backup restore. Restricted backups are rotated within 30 days; restored copies must have completed deletions reapplied before service resumes. Copies you or your organization export or share must also be managed by their recipients.
Delete your account
In the app, open Me > Delete account. If you cannot sign in, open Account help & privacy > Account deletion & status on the sign-in screen. Verify your password, read the consequences and confirm. A request is accepted in the app without requiring an email or call. We handle requests within 30 days. Keep your private receipt code to check progress and the completion result after your login is removed. Further questions and your replies can be handled in the app.
What deletion does
Once processing is complete, we erase your account credentials, revoke all sessions and remove personal records and images that need not be retained. A responsible operator checks any unsettled shared accounting matters first. Organization owners with other members need an approved ownership handover so another person’s access is not destroyed. If the owner is the only member, the organization can be closed as part of deletion without creating a replacement account. If specific records must be kept by law, we explain the records, reason, duration and access restrictions through the request status; they are not used for unrelated purposes. Deletion does not remove another member’s account or records. Images shared with another valid record may need separate review. Completed deletion is irreversible.
Your choices and rights
You may request access, correction, a copy or deletion of your information, or raise a privacy complaint through the contact above. Available rights depend on your location. We verify identity before disclosing or changing private records, and do not require you to send a password by email. The service is intended for organization members, not for children to independently open accounts. Submit only information and third-party images you are authorized to share.
Security and changes
We use HTTPS, salted password hashes, restricted database roles and organization-level access controls. No system can guarantee absolute security. We update this page when our practices change, record its version, and provide additional notice when a change materially affects your rights.
Include your organization name, app version and a description of the issue. Do not send passwords, verification codes or unredacted financial documents.