Privacy Policy

Last updated 24 August 2026

This Privacy Policy explains how Tallycent (“we”, “us”) collects, uses, discloses, and protects personal data, in line with Singapore’s Personal Data Protection Act (PDPA). It applies to anyone who uses Tallycent or visits this website.

1. Personal Data We Collect

We collect:

Account data — your name, email address, business name, and GST registration number, if applicable.
Financial data — the expense records you create, receipt images and PDFs you upload, and transactions imported from bank or card statements you provide (merchant, date, amount, and category).
Billing data — your subscription plan and billing history. Full card details are handled directly by our payment processor and are not stored on our servers.
Usage data — sign-in activity and basic device/browser information, used for security and to keep the service working properly.

2. How We Collect It

Directly from you — when you sign up, enter expense details, upload a receipt, or import a statement — and automatically, through basic session cookies needed to keep you signed in.

3. Why We Use It

To provide the service: recording expenses, extracting details from receipts, generating GST reports.
To operate your account: billing, customer support, and responding to enquiries.
To keep the service secure and to investigate misuse.
To meet our own legal and record-keeping obligations.
To improve Tallycent — only ever using aggregated or de-identified data for this, never your individual financial records without your consent.

4. Legal Basis

We rely on your consent, given when you create an account and agree to this Policy, and on the PDPA’s provisions for reasonable purposes necessary to provide a service you have requested (for example, processing a receipt you upload). You can withdraw consent at any time by contacting us, though this may mean we can no longer provide the service to you.

5. Who We Share Data With

We do not sell your personal data. We share it only with service providers who help us run Tallycent, under agreements that require them to protect it and use it only for the purpose we specify:

our cloud infrastructure provider (Google Cloud Platform), for hosting and storage;
our receipt-processing provider, to extract merchant, date, and amount from uploaded receipts;
our payment processor, to handle subscription billing;
where required by law, regulation, or a valid legal request.

6. Storage, Security, and Retention

Your data is hosted on Google Cloud Platform in the Singapore region.
Data is encrypted in transit and at rest, with role-based access controls limiting who can view it, and every access is logged for audit.
Uploaded receipts are retained for seven years, matching Singapore record-keeping norms for business records, after which they are archived and eventually deleted.
If you close your account, we retain your data only as long as needed for the purposes above or as required by law, then delete it.

7. International Transfers

Our primary infrastructure is hosted in Singapore. Where a service provider (for example, a payment processor) operates outside Singapore, we require it to provide a standard of protection comparable to the PDPA before any data is transferred.

8. Your Rights Under the PDPA

You can, at any time:

ask what personal data we hold about you, and request a copy;
ask us to correct inaccurate or outdated data;
withdraw your consent to our collection, use, or disclosure of your data;
ask us to delete your data, subject to our legal retention obligations (Section 6);
lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe we have not handled your data properly.

To exercise any of these, contact us using the details below.

9. Cookies

We use only the cookies necessary to keep you signed in and to remember basic preferences. We do not currently use third-party advertising or tracking cookies.

10. Changes to This Policy

We may update this Policy as the service evolves. If a change is material, we will notify you by email or an in-product notice before it takes effect.

11. Contact and Data Protection Queries

For any question about this Policy or your personal data, contact us at hello@tallycent.com.
Tallycent · UEN [to be inserted] · Singapore