Privacy Notice

Last updated: April 8, 2026

This Privacy Notice for Asset-Lens ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at https://assetlens.io or any website of ours that links to this Privacy Notice.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@assetlens.io.

Summary of Key Points

• Personal information we process. We process information you provide

when you register, use the Services, contact us, or engage with us. This includes names, email addresses, job titles, usernames, passwords, billing addresses, and (when you subscribe) payment card details handled by our payment processor.

• Sensitive information. We process financial data only as needed to

process invoices you upload to our Services. We do not collect special categories like health, biometric, or political data.

• Information from third parties. We do not collect personal information

from third-party data brokers.

• How we use your information. We process your information to provide,

improve, and administer our Services, communicate with you, prevent fraud and security incidents, and comply with legal obligations.

• Sharing. We share information only with vendors and service providers

who help us operate the Services (see Subprocessors below) and where required by law.

• Your rights. Depending on where you live, you may have the right to

access, correct, delete, or export your personal information. To exercise these rights, email support@assetlens.io.

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express interest in obtaining information about our products and Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include:

• Names
• Email addresses
• Job titles
• Usernames
• Passwords (stored hashed, never in plaintext)
• Billing addresses
• Payment card details (handled by our payment processor; we never see your

full card number)

Information about your invoices

To deliver the core function of our Services we process the contents of invoices you upload, including vendor names, amounts, dates, line items, and any text the AI extracts. This content stays inside your organization's private workspace and is never used to train shared AI models.

Information automatically collected

When you use our Services we automatically collect certain information, such as your IP address, browser type, operating system, device identifiers, pages viewed, and referring URLs. We use this to operate, secure, and improve the Services.

2. How Do We Process Your Information?

We process your personal information for a variety of reasons:

• To create and manage your account. Sign-in, password reset, two-factor

authentication, and account settings.

• To deliver the Services. Extract data from your invoices, match

vendors and properties, route invoices for approval, and export to your accounting system.

• To process payments. When you subscribe we share the necessary billing

details with our payment processor.

• To communicate with you. Service announcements, security alerts,

password resets, and (with your consent) product updates.

• To prevent fraud and abuse. Rate limiting, anomaly detection, and

account-level security signals.

• To comply with law. Tax reporting, audit cooperation, and legal

process when properly served.

3. When and With Whom Do We Share Your Personal Information?

We share information only with:

• Service providers ("subprocessors") who help us operate the Services.

See the list below.

• Affiliates that are bound by this Privacy Notice.
• Business transfers in connection with a merger, acquisition, or sale

of assets — we will notify you before your information is transferred and becomes subject to a different privacy notice.

• Legal obligations when required by law or to respond to lawful

requests by public authorities.

We do not sell your personal information to advertisers or data brokers.

Subprocessors

4. Do We Use Cookies and Other Tracking Technologies?

We use only essential session cookies to keep you signed in. We do not use third-party advertising or analytics cookies.

5. Do We Offer AI-Based Products?

Yes. We use third-party AI providers (currently Anthropic Claude) to extract structured data from the invoices you upload. We send invoice contents to Anthropic over an encrypted connection. Per our agreement with Anthropic, your invoice contents are not used to train Anthropic's models.

6. How Do We Handle Social Logins?

We do not currently offer social login.

7. How Long Do We Keep Your Information?

We keep your personal information for as long as your account is active or as needed to provide the Services. After account deletion we retain a minimal record (account name + deletion date) for fraud prevention and legal compliance, typically for 7 years to satisfy financial-records retention laws.

8. Do We Collect Information From Minors?

We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with personal information, please contact support@assetlens.io and we will delete it.

9. What Are Your Privacy Rights?

Depending on where you live you may have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your information
• Object to or restrict processing
• Export your information in a portable format
• Withdraw consent at any time

To exercise any of these rights, email support@assetlens.io. We will respond within 30 days.

10. Controls for Do-Not-Track Features

We do not currently respond to Do-Not-Track browser signals because no common standard exists. If a standard is adopted in the future we will update this notice.

11. Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, Utah, Virginia, or another state with comprehensive privacy law, you have the rights listed in Section 9 above. Email support@assetlens.io to exercise them. You will not be discriminated against for exercising your rights.

12. Do We Make Updates to This Notice?

Yes, we will update this Notice as necessary to stay compliant with relevant laws. The updated version will be indicated by a "Last updated" date at the top. Material changes will be communicated either by prominent notice in the Services or by direct email.

13. How Can You Contact Us About This Notice?

If you have questions or comments about this Notice, email support@assetlens.io.

14. How Can You Review, Update, or Delete the Data We Collect From You?

You may review, change, or delete most of your personal information from the Settings page in the app, or by emailing support@assetlens.io.