Privacy Policy

1. Introduction

PettyCash ("we", "us", "our") operates the petty cash management application at pattycashsystem.web.app and the marketing website at pettycash.site (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal and financial data when you use our Service. By using PettyCash, you agree to the practices described in this policy.

2. Data We Collect

We collect the following types of data:

Account data: Name, email address, company name, and role when you register.

Transaction data: Petty cash transactions, receipts, expense categories, fund balances, and approval records that you or your team enter into the system.

Usage data: Device information, browser type, pages visited, and interaction data collected through Google Analytics and Microsoft Clarity.

Contact form data: Name, email, subject, and message when you submit our contact form.

3. How We Use Your Data

We use your data to:

Provide and maintain the PettyCash service, process petty cash transactions and generate reports, send service-related notifications (e.g., approval requests), improve our features and user experience, respond to your support requests, and comply with legal obligations under Saudi law.

4. Data Sharing

We do not sell your personal or financial data to third parties. We share data only with: (a) our infrastructure provider (Google Firebase) for data storage and hosting, (b) analytics providers (Google Analytics, Microsoft Clarity) for usage analytics — these providers process data in aggregate and do not access your individual transaction data, and (c) legal authorities when required by Saudi law or court order.

5. Data Retention

We retain your data for as long as your account is active. You can request data export or account deletion at any time by contacting us. Upon account deletion, we remove your personal data within 30 days, except where retention is required by Saudi tax or legal regulations (e.g., financial records may need to be retained for 6 years per ZATCA requirements).

6. Data Security

We protect your data using TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and immutable audit trails. See our Security page for full details.

7. Your Rights

You have the right to: access your personal data, request data export, request correction of inaccurate data, request deletion of your data (subject to legal retention requirements), and object to certain processing activities. To exercise these rights, contact us at privacy@pettycash.site.

8. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies (Google Analytics, Microsoft Clarity) to understand usage patterns. You can disable analytics cookies through your browser settings without affecting core functionality.

9. Children's Privacy

PettyCash is a business tool and is not intended for use by individuals under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact

For privacy questions or requests, contact us at privacy@pettycash.site or through our contact page.