Privacy, Data Protection & Account Deletion Policy

Journey Junction

301 Extn-273, South Center, Masjid Moth, South Delhi, Delhi – 110049, India

Email: support@journey-junction.in

This Policy applies to:

• Expense India web application
• Expense India mobile applications
• Expense India APIs
• Customer support interactions
• Sales and onboarding interactions
• Any related products or services operated by Journey Junction

This Policy applies to individual users, employees, contractors, administrators, managers, company owners and organizations using the platform.

Expense India is a software platform that enables organizations to manage employee expenses, approvals, reimbursements, reporting and related workflows. Expense India acts solely as a technology platform.

Journey Junction does not:

• Verify expenses
• Approve expenses
• Reject expenses
• Validate receipts
• Audit transactions
• Provide accounting services
• Provide tax advice
• Provide legal advice
• Provide payroll services
• Provide financial consulting services

All business decisions made through the platform remain the sole responsibility of the registered business organization.

4.1 User Information

• Full name
• Email address
• Mobile number
• Employee identification number
• Designation
• Department
• Profile photograph (if provided)
• Login credentials

4.2 Organization Information

• Company name
• Business address
• GST details (if provided)
• Billing details
• Organizational structure
• Cost centers
• Approval hierarchy

4.3 Expense Information

Users may upload or submit:

• Expense claims
• Receipts
• Bills
• Invoices
• Travel expenses
• Meal expenses
• Accommodation expenses
• Transportation expenses
• Supporting documentation
• Comments and notes

4.4 Technical Information

We may automatically collect:

• IP address
• Device information
• Browser information
• Application logs
• Access timestamps
• Operating system information
• Security logs
• Error reports

4.5 Customer Support Information

When contacting support, we may collect:

• Name
• Email address
• Mobile number
• Organization details
• Support communications
• Attachments voluntarily provided

All expense records, receipts, reimbursement data, employee records, approval records and other business information uploaded into Expense India remain the property of the respective registered business organization. Journey Junction does not acquire ownership rights in customer business data.

The registered organization remains solely responsible for determining:

• What information is collected
• What information is uploaded
• Who may access information
• How information is used within the organization
• How long information should be retained

For enterprise privacy purposes, the customer organization acts as the primary controller of its business data and Journey Junction acts as a service provider processing information on behalf of the customer.

We may use collected information for legitimate business purposes including:

• Creating user accounts
• User authentication
• Expense workflow processing
• Approval routing
• Platform administration
• Customer support
• Service communications
• Security monitoring
• Fraud prevention
• Performance monitoring
• Product maintenance
• Legal compliance
• Dispute resolution
• Backup and recovery operations

Journey Junction does not use customer expense data for:

• Advertising purposes
• Behavioral profiling
• Sale to third parties
• Marketing unrelated products
• Commercial exploitation of expense records

Journey Junction does not sell customer personal information.

Users and registered organizations are solely responsible for:

• Accuracy of uploaded information
• Authenticity of receipts
• Validity of invoices
• Expense classifications
• Tax treatment
• Internal approvals
• Regulatory compliance

Journey Junction does not independently verify information submitted through the platform. Journey Junction shall not be responsible for errors, omissions, inaccuracies, fraud, duplicate claims or false information submitted by users.

Information may be disclosed only where reasonably necessary:

9.1 Authorized Users

Information may be accessible to authorized users within the registered organization according to configured permissions.

9.2 Service Providers

We may use third-party providers for:

• Cloud hosting
• Data storage
• Email delivery
• Security services
• Analytics
• Customer support
• Payment processing

Such providers may access information only to the extent necessary to perform services for us.

9.3 Legal Requirements

We may disclose information when required by:

• Applicable law
• Court order
• Government authority
• Regulatory authority
• Law enforcement requests

or when necessary to protect our legal rights, users, systems or services.

Information may be retained for as long as reasonably necessary for:

• Platform operations
• Customer support
• Security investigations
• Fraud prevention
• Audit requirements
• Contractual obligations
• Legal compliance
• Backup restoration

Retention periods may vary depending on the nature of the information and applicable legal requirements.

Users may request deletion of their account by:

• Using platform deletion functionality (where available)
• Contacting support@journey-junction.in

We may require verification of identity before processing deletion requests. Deletion requests are generally processed within thirty (30) days.

Certain information may be retained where necessary for:

• Legal obligations
• Tax requirements
• Accounting requirements
• Security investigations
• Fraud prevention
• Contract enforcement
• Dispute resolution
• Backup recovery processes

Deletion of a user account does not necessarily require immediate deletion of business records belonging to the registered organization.

Journey Junction implements commercially reasonable technical and organizational safeguards designed to protect information. Security measures may include:

• Role-based access controls
• Authentication controls
• Access logging
• Infrastructure monitoring
• Backup systems
• Administrative safeguards
• Secure hosting environments

However, no system can guarantee absolute security. Users acknowledge that internet-based services inherently involve risks including unauthorized access, system failures, cyberattacks and data breaches.

Information may be stored or processed in locations where our service providers operate. By using the platform, users consent to such processing where legally permissible.

Subject to applicable law, users may request:

• Access to personal information
• Correction of inaccurate information
• Deletion of eligible information
• Withdrawal of consent where applicable
• Information regarding processing activities

Requests may be submitted to: support@journey-junction.in

Expense India is intended for business use and is not directed toward children. Users must be at least eighteen (18) years of age or otherwise legally authorized by their employer or organization to use the platform.

Journey Junction reserves the right to modify this Policy at any time. Updated versions will be published through the website, application or other appropriate channels. Continued use of the platform after publication of updates constitutes acceptance of the revised Policy.

For privacy-related questions, concerns or requests:

Journey Junction

301 Extn-273, South Center, Masjid Moth, South Delhi, Delhi – 110049, India

Email: support@journey-junction.in

Users may submit privacy, security or data protection concerns to: support@journey-junction.in

Journey Junction will make commercially reasonable efforts to review and respond to legitimate requests within a reasonable timeframe.