Back to home

PRIVACY NOTICE

Last updated July 30, 2026

This Privacy Notice for Crumbli Services Inc. ("we," "us," or "our") describes how and why we access, collect, store, use, and/or disclose ("process") your personal information when you use our services ("Services"), including when you:

  • Visit our website at https://www.crumbli.tech or any website of ours that links to this Privacy Notice
  • Use Crumbli, a web and mobile application for capturing receipts, parsing and categorizing expenses, tracking business mileage/trips, and syncing approved records to connected accounting platforms such as QuickBooks Online and Xero
  • Connect Crumbli to a third-party accounting platform (such as Intuit QuickBooks Online or Xero) or to a third-party login or identity provider
  • Engage with us in other related ways, including any marketing or events

This Privacy Notice relates to all of our activities, unless we have provided you with a separate notice for a particular product, service or activity.

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION?
  3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
  4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
  5. ACCOUNTING AND THIRD-PARTY PLATFORM INTEGRATIONS
  6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
  7. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
  8. HOW DO WE HANDLE YOUR THIRD-PARTY LOGINS?
  9. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
  10. HOW LONG DO WE KEEP YOUR INFORMATION?
  11. HOW DO WE KEEP YOUR INFORMATION SAFE?
  12. DO WE COLLECT INFORMATION FROM MINORS?
  13. WHAT ARE YOUR PRIVACY RIGHTS?
  14. CONTROLS FOR DO-NOT-TRACK FEATURES
  15. DO WE MAKE UPDATES TO THIS NOTICE?
  16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register for the Services, use the Services, or contact us. The personal information we collect may include:

  • names
  • email addresses
  • account credentials (such as passwords or single sign-on identifiers)
  • business and organization details (such as your business name, role, and province)
  • billing and payment information (processed by our payment processor — see below)
  • receipt images, documents, and the expense data contained in them (vendor, date, amounts, tax, line items, and any notes you add)
  • trip details you enter to track business mileage, such as start and destination addresses and distances (see "Google Maps Platform" in Section 4)
  • accounting data you import or that we receive from a connected accounting platform on your behalf (see Section 5)

Payment data. If you purchase a paid plan, payment card data is collected and stored by our payment processor, Stripe, not by us. We receive limited billing details (such as your name, billing address, plan, and the last four digits / card type) to manage your subscription. Stripe's privacy notice is available at https://stripe.com/en-ca/privacy.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services, primarily to maintain security and operation and for internal analytics and reporting. This may include:

  • Log and usage data — IP address, device and browser type and settings, the pages and features you use, dates/timestamps, searches and actions taken, and error/diagnostic data (such as crash reports).
  • Device data — information such as your device type, operating system, and, where applicable, mobile carrier or service provider.

We collect some of this information through cookies and similar technologies (see Section 6).

Information we receive from third parties

We receive information from third parties when you direct us to connect to them, including: (a) accounting platforms you choose to connect, such as Intuit QuickBooks Online and Xero (see Section 5); (b) your login or single sign-on / identity provider (see Section 8); and (c) our payment processor.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information to:

  • Create and manage your account and authenticate you.
  • To provide our Services.
  • Sync approved records to the accounting platform you connect (such as QuickBooks Online or Xero), at your direction.
  • Respond to your inquiries and provide support.
  • Send administrative information, such as changes to our terms and policies.
  • Request feedback and, where permitted, send marketing communications you can opt out of at any time.
  • Evaluate and improve the Services and understand usage trends.
  • Maintain the security of the Services and prevent fraud, and comply with legal obligations.

We may use your personal information and other information for purposes for which we have obtained your consent, and for such other purposes as may be permitted or required by applicable law.

We do not use the content of your receipts or accounting data to serve third-party advertising, and we do not sell your personal information. We do not use your content to train generative AI models (see Section 7).

We rely on your consent (express or implied), the performance of our contract with you, and compliance with legal obligations to collect, use and disclose your personal information. We may collect, use or disclose personal information as otherwise permitted by applicable law. You can withdraw consent at any time (see Section 13).

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We do not sell your personal information. We share personal information in the following situations:

  • Service providers. We share information with vendors who process data on our behalf, including hosting and storage providers, payment processors, authentication tools, and research and analytics providers.
  • Advertising platforms. We share limited activity such as page visits and sign-up or subscription milestones — never the contents of your receipts, your expense data, or other data about your business — with advertising providers to measure, target, and improve our advertising, including showing ads to people similar to our customers, which in some regions may be considered "sharing" for cross-context behavioral advertising (see Sections 6 and 13).
  • Accounting platforms you connect with our Services. When you connect QuickBooks Online or Xero, we exchange data with that platform to provide the integration you requested (see Section 5).
  • Google Maps Platform (mileage feature). If you use our mileage/trip feature, we send the start and destination addresses you enter to Google Maps Platform APIs (such as the Places and Routes APIs) to provide address autocomplete and to calculate trip distances. Your use of these features is subject to Google's terms, and Google's processing of this data is governed by the Google Privacy Policy.
  • Business transfers. We may share or transfer your information in connection with a merger, financing, acquisition, or sale of all or part of our business.
  • Legal and safety. We may disclose information where required by law or to protect our rights, your safety, or the safety of others, or to detect and prevent fraud.

5. ACCOUNTING AND THIRD-PARTY PLATFORM INTEGRATIONS

If you choose to connect Crumbli to Intuit QuickBooks Online, Xero, or a similar accounting platform, you authorize that connection through the platform's secure authorization (OAuth) flow. We never ask for or store your QuickBooks or Xero password.

  • What we access. Depending on the integration and the permissions you grant, we may access and exchange data such as your company/organization profile, chart of accounts, vendors, expense categories/tax codes, and the expense and receipt records you create or approve in Crumbli.
  • How we use it. We use this data solely to provide the Services to you — for example, to match categories and tax codes and to sync your approved receipts and expenses. We do not use QuickBooks or Intuit data for advertising, we do not sell it, and we do not disclose it to anyone other than you and the service providers in Section 4 acting on our behalf, except as required by law.
  • Your control and disconnection. You can disconnect the integration at any time from within Crumbli or from your QuickBooks/Xero account. After you disconnect, we stop accessing new data from that platform. We delete or de-identify data we received from the platform when it is no longer needed to provide the Services to you, subject to the retention periods in Section 10.

Your use of QuickBooks Online and Xero is governed by Intuit's and Xero's own terms and privacy notices and all questions regarding these platforms should be directed to those platforms.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We use cookies and similar technologies (such as pixels) to keep you signed in, maintain security, remember your preferences, fix bugs, and understand how the Services are used through product analytics (for example, PostHog).

Advertising. We and our advertising providers use cookies, pixels, and events sent from our servers — including a hashed, irreversible version of your email, and never the contents of your receipts or your expense data — to measure and target our advertising, including showing ads to people similar to our customers, and you can turn this off, or back on, at any time using the "Cookie preferences" control on our website or the Privacy & cookies settings in the app.

You can usually set your browser to remove or reject cookies; doing so may affect certain features.

7. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

As part of the Services, we use artificial intelligence to extract and categorize the data in your receipts (collectively, "AI Products"). We provide these features through third-party AI providers, currently Anthropic. To parse your receipts, the receipt image and related data are sent to and processed by the AI provider for that purpose.

  • We process this data in line with this Privacy Notice and our agreements with the AI provider.
  • A decision that produces a legal or similarly significant effect about you is not made solely by automated means; you can review and edit AI-suggested categories and totals, and you remain responsible for verifying them.

The interactive demo on our website

You can try Crumbli on our website without creating an account. When you use the demo, the receipt image you submit is parsed by our AI provider and stored only briefly so the result can be displayed — for the cross-device demo, this means a short-lived session token, the parsed text, and the image bytes are held in our database temporarily. The image and related data are hard-deleted within approximately 5 minutes of capture, when you close the browser tab, or when you start a new demo, whichever comes first. Demo images are not written to our long-term receipt storage and are not used to train AI models. We log anonymous request metadata (such as file size, file type, parse duration, and outcome) to keep the demo working and prevent abuse. Our AI provider (Anthropic) may retain inputs for a limited period for trust-and-safety purposes before deletion.

8. HOW DO WE HANDLE YOUR THIRD-PARTY LOGINS?

You can create an account using an email address and password, or register and sign in using your Google or Microsoft account through single sign-on (provided via our authentication provider, WorkOS). Where you sign in with Google or Microsoft, we receive limited profile information from that provider — typically your name and email address — to create and secure your account. We never receive your Google or Microsoft password.

We use this information only as described in this Notice, and we do not control the provider's own use of your information; we recommend you review its privacy notice.

9. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Crumbli Services Inc. is based in Canada. Your information is stored and processed in the United States. Other service providers we use (such as Stripe and Anthropic) may also process your information in the United States. Because your information is processed outside Canada, it may be accessible to courts, law enforcement, and regulatory authorities in those jurisdictions under their laws. Where we transfer personal information across borders, we use contractual and other safeguards designed to protect it.

10. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your personal information for as long as you maintain an account with us and as needed to provide the Services. Because Crumbli supports tax and accounting workflows, we may retain receipts and expense records longer where you or applicable law require it (for example, to support tax recordkeeping). When we no longer have a legitimate need to process your information, we will delete or de-identify it, or, if that is not immediately possible (for example, because it is in backups), securely store and isolate it until deletion is possible. Data received from a connected accounting platform is handled as described in Section 5.

11. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate and reasonable technical and organizational safeguards designed to protect your personal information, including encryption of data in transit (TLS) and at rest, access controls, and tenant isolation so that one customer's data is not accessible to another. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You should access the Services within a secure environment.

12. DO WE COLLECT INFORMATION FROM MINORS?

The Services are intended for business use by adults. We do not knowingly collect or solicit information from children under 18 (or the age of majority in your jurisdiction). If we learn we have collected such information, we will deactivate the account and delete the data.

13. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location, you may have the right to: (i) request access to and a copy of your personal information; (ii) request correction or deletion; (iii) restrict or object to processing; (iv) data portability; and (v) not be subject to solely automated decision-making with legal or similarly significant effects. You may also withdraw consent at any time, which will not affect the lawfulness of prior processing. To exercise these rights, contact us using the details in Section 16.

Marketing opt-out. You can unsubscribe from marketing at any time using the link in our emails or by contacting us. We may still send you service-related messages necessary to administer your account.

Account information. You can review or update your account information by logging in to your account settings. On request to close your account, we will deactivate or delete your account and information from our active databases, except information we must retain to prevent fraud, resolve disputes, comply with legal obligations, or enforce our agreements.

14. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers and some operating systems offer a Do-Not-Track ("DNT") setting. No uniform standard for recognizing DNT signals has been finalized, so we do not currently respond to DNT signals. If a standard is adopted that we are required to follow, we will update this Notice.

15. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top. If we make material changes, we will notify you by posting a prominent notice on our website or by sending a direct notification. We encourage you to review this Notice periodically.

16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this Notice, email us at josh@crumbli.tech or write to us at:

Crumbli Services Inc. 211 - 540 18 Ave SW Calgary, Alberta T2S 0C5 Canada