Privacy Policy

Loyo Bondar ("the App", "we", "us") is an internal expense-approval application used by the Company's own employees to submit, review, approve, and pay expense requests. The App is for internal company use only — it is not offered to the public, and access is by invitation only. This policy explains what information the App collects, why, and how it is protected.

• Identity information: your name and email address, set up when your account is created by a company administrator.
• Expense requests: the details you submit — amounts, descriptions, categories, currencies — and any attachments you upload, such as invoices, receipts, or payment proof.
• Payout details: if you request a reimbursement or an advance, the bank or crypto account details you provide so the Company can pay you.
• Telegram (optional): if you choose to link your Telegram account to our bot (@lbappbot), we store your Telegram chat ID so we can send you notifications there. Linking is entirely optional.

We use this information solely to operate the expense-approval workflow: routing your requests to the right approvers, tracking their status, processing payments, and sending you notifications about activity on your requests (by email and, if linked, Telegram). We do not use your information for advertising, and we do not build profiles about you beyond what the workflow itself requires.

You can sign in with a company-issued email and password, or with Google Sign-In. When you use Google Sign-In, we use it only to authenticate you — to confirm who you are — via the standard "email", "profile", and "openid" scopes (your name, email address, and Google profile ID). We do not request or access any other data from your Google account — no contacts, no files, no calendar, nothing beyond confirming your identity.

Your data is stored on Google Cloud infrastructure (Firebase and a managed Postgres database), hosted in the asia-southeast1 (Singapore) region.

Access is limited to the Company's own authorized personnel — the roles involved in reviewing and paying your requests (for example, department heads, finance, and administrators), each scoped to what their role requires to do its job. Your data is never made available to the public or to any other company.

We send you notifications about your requests by email (via Resend) and, if you've linked your account, Telegram. You can unlink Telegram at any time from your profile page.

We retain your data for as long as your account is active, and afterward for as long as reasonably needed to keep the Company's financial and approval records. If you leave the Company, contact an administrator about your account.

We do not sell your data. We do not share it outside the Company, except with the infrastructure providers that operate the App on the Company's behalf — Google (hosting and sign-in), Resend (email delivery), and Telegram (optional notifications). These providers process your data only as needed to provide their service to us, not for their own purposes.

We may update this policy as the App changes. The "Last updated" date above reflects the most recent revision.

Questions about this policy? Contact your company administrator, or email support@loyobondar.app.