Privacy Policy

Legal Notice

This policy is a template for KVKK/GDPR compliance work. Before publishing, have it reviewed against your actual processing activities by a lawyer or data-protection advisor. MANUAL STEP: obtain final legal approval.

Data We Process

ExpenSheet processes uploaded receipt and invoice images temporarily to produce OCR results. File names, vendor names, and monetary amounts are not sent as analytics event parameters. OCR output is converted into a table in the browser; production configuration does not permanently store uploaded images.

Cookies and Similar Technologies

Essential cookies support security, language selection, quota, and cookie-preference functionality. No third-party analytics or advertising script is loaded unless you give explicit consent for that category. Your choice is stored on your device under “expensheet_consent”.

Google Analytics 4

GA4 loads only after analytics consent. It receives anonymized product events such as page views, file uploads, OCR success/error, and exports. We do not send file names, vendor names, or exact monetary values. GA4 retention is configured in Google Analytics Admin; the recommended setting is 2-14 months.

Microsoft Clarity

Clarity loads only after analytics consent. It is used for session improvement, click/navigation signals, and technical error analysis. Sensitive content should be excluded or masked where possible. Microsoft Clarity default retention and processing terms should be verified in the Microsoft dashboard.

Google AdSense and Advertising Cookies

When advertising consent is granted, Google Consent Mode v2 updates “ad_storage”, “ad_user_data”, and “ad_personalization”. AdSense or similar ad technologies may use cookies for ad measurement, fraud prevention, and personalization where permitted.

Your Rights

Under KVKK article 11, you may request information about whether personal data is processed, the purpose of processing, recipients in Turkey or abroad, correction or deletion, objection to processing, and compensation for damages. Under GDPR articles 15-21, you may exercise rights of access, rectification, erasure, restriction, portability, and objection.

Changing Preferences

You can change cookie preferences at any time through the “Cookie preferences” link in the site footer. If you clear browser cookies, you may be asked to choose again.

Contact

For privacy-related questions, please use our contact page.

Last updated: 2026