1. Personal Data We Collect
In this Policy, "Personal Data" means any information relating to an identified or identifiable individual. We collect Personal Data in three ways: information you provide, information produced via the Services, and information collected automatically.
Information You Provide
Account Information.
To use Aqqrue, you may create an account and provide Personal Data such as your name, email address, role, and organizational details.
Business and Financial Data.
When using Aqqrue to manage bills, expenses, approvals, vendors, or accounting workflows, you may input or upload data such as employee details, invoice documents, expense reports, vendor contact information, and other information necessary for AP operations.
Input Data.
When you use the Services, you provide input data to generate financial insights, reports, or other useful business information. We will receive any Personal Data you choose to input into the Services. If you integrate third-party products with the Services, you may make certain Personal Data associated with those products available to the Services as input data.
Integrations.
If you connect third-party tools (e.g., QuickBooks, Xero, ERPs, HRIS, email providers), Aqqrue receives the Personal Data those systems make available based on your authorization.
Marketing Information.
If you sign up for newsletters, events, or updates, you may provide Personal Data such as your name and email address.
Information Generated by the Services
Output Data.
Our Services may generate insights, categorizations, or recommendations based on the information you provide. Output may contain Personal Data (e.g., employee names in approval flows or spend-related insights).
Information We Collect Automatically
We use cookies and similar technologies to operate and improve our Services.
Functional Cookies. Required for core features such as login, form completion, and secure session management.
Analytics Cookies. Used to understand how users interact with our website and app so we can improve performance and usability.
Advertising Cookies. Used only on marketing pages to show relevant ads, where applicable.
The information collected via such cookies may include information such as your IP address, device ID, advertising ID, clicks, URLs visited and other interactions, inferred location data, and advertising interactions.
2. How We Use Personal Data
We use your Personal Data only for legitimate business purposes and in compliance with applicable laws.
| PURPOSE | DESCRIPTION | LEGAL BASIS |
|---|---|---|
| Providing the Services | Operating, maintaining, and improving Aqqrue; enabling AP workflows, invoice processing, approvals, payments, and integrations. | Contract necessity; legitimate interest; consent (where required). |
| Support | Diagnosing issues, helping you use the product, and responding to inquiries. | Contract necessity; legitimate interest. |
| Fraud & Security | Detecting and preventing fraud, unauthorized activity, or security risks. | Legal obligation; legitimate interest. |
| Customer Relationship Management | Managing onboarding, renewals, updates, and customer engagement. | Contract necessity; legitimate interest. |
| Communications | Sending updates, administrative messages, surveys, and service announcements. | Contract necessity; consent. |
| Analytics & Product Development | Understanding product usage to improve accuracy, performance, and reliability. | Legitimate interest; consent (where applicable). |
| Marketing | Sending marketing communications that may interest you. You can opt out at any time. | Consent; legitimate interest. |
| Legal & Compliance | Complying with laws, enforcing terms, and handling legal requests. | Legal obligation; legitimate interest. |
4. Data Storage, Retention, and Deletion
We store your Personal Data on secure servers located in the United States, using industry-standard encryption and access controls to protect your information during storage. We take measures to delete your Personal Data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we need to retain certain information as required by law, including to comply with tax requirements, or for as long as is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse or enforce our terms and conditions.
When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and the relevant statute of limitations. With respect to an agreement to provide Services to you, we retain Personal Data for the duration of the agreement. Upon conclusion of an agreement to use the Services, we take measures to delete your Personal Data, unless we need to retain certain information as required by law, including to comply with tax requirements, or for as long as is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse or enforce our terms and conditions.
With respect to Personal Data that we receive outside of an agreement to provide the Services, when determining the specific retention period and deletion, we take into account various criteria, such as the basis for processing the data, the nature and length of our relationship with you, and mandatory retention and deletion periods provided by law and the relevant statute of limitations.
5. Your Rights in Relation to Your Personal Data
Depending on where you reside, you may have the following legal rights:
Access and Portability. You may ask us to provide you with a copy of the Personal Data we maintain about you, including a machine-readable copy of the Personal Data that you have provided to us, and request information about its processing.
Rectification and Deletion. You may ask us to update and correct inaccuracies in your Personal Data, or to have the information anonymized or deleted, as appropriate.
Restriction and Objection. You may ask us to restrict the processing of your Personal Data, or object to such processing.
Consent Withdrawal. You may withdraw any consent you previously provided to us regarding the processing of your Personal Data, at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.
Complaint. You may lodge a complaint with a supervisory authority, including in your country of residence, place of work, or where an incident took place. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance.
You may exercise these rights by contacting us at contact@aqqrue.ai. Please note that there are exceptions and limitations to each of these rights.
6. Third-Party Links
Our website may link to third-party sites or services. We are not responsible for their privacy practices. Review their privacy policies before providing Personal Data.
7. Security
We implement industry-standard security measures, including encryption of data in transit and at rest, access controls, regular security audits, and employee training on data protection, to safeguard your Personal Data against unauthorized access, loss, or misuse. However, because no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information, to the extent permitted by applicable law.
8. Children's Privacy
Aqqrue is not intended for children under 16. We do not knowingly collect Personal Data from minors. If you believe a minor has provided us data, contact us.
9. Cross-Border Data Transfers
Our Services are hosted in the United States ("U.S."). If you choose to use our Services from regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your Personal Data outside of those regions to the U.S. for storage and processing.
If you are located in the European Economic Area, the United Kingdom or Switzerland ("Europe"), we will comply with applicable data protection laws when transferring your Personal Data outside of your jurisdiction. In particular we will rely on (i) an EU Commission, UK or Swiss government adequacy decision, (ii) contractual protections for the transfer of your Personal Data, or (iii) another valid data transfer mechanism. If you are located in Europe, you may contact us as specified below for more information about the safeguards we use to transfer Personal Data outside of Europe.
10. Changes to This Policy
We may update this Policy from time to time. Changes will be reflected by updating the "Last Updated" date. If changes are material, we will notify you via email or within the Services.
11. Our Contact Information
Aqqrue is the entity responsible or "data controller" for the processing of your Personal Data as described in this Policy. Should you have any queries regarding this Policy, about Aqqrue's processing of your Personal Data or if you wish to exercise your rights with respect to your Personal Data, you can contact Aqqrue by email at contact@aqqrue.ai.