Privacy Policy

Last updated: October 06, 2025

Company: Live Shuttle ehf.
Address: Biskupsgata 5, 113 Reykjavík, Iceland
Company ID: 470612-0610
Email: support@expensedock.com

1. Introduction

ExpenseDock, operated by Live Shuttle ehf. ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use ExpenseDock ("Service"). We comply with the General Data Protection Regulation (GDPR) and applicable Icelandic privacy laws. By using our Service, you consent to the practices described in this policy.

2. Data We Collect

  • Account Information: Name, email address, password, company name, tax ID, and social security number (Kennitala).
  • Uploaded Data: Receipts, invoices, and related images or files submitted for processing.
  • Usage and Device Data: Log data, IP address, browser type, operating system, and access times.
  • Payment Information: Processed securely via Straumur (we do not store full payment details).
  • Analytics Data: Through Meta Pixel and Google Analytics to improve product performance and marketing effectiveness.

3. Purpose of Processing

  • Process receipts using Google Document AI and OpenAI.
  • Provide, operate, and maintain the Service.
  • Manage billing and subscription services.
  • Communicate with users about account updates and support.
  • Send marketing and product update emails (users may opt out at any time).
  • Improve and analyze service performance through aggregated analytics.

We do not use uploaded receipt data for training any AI models, nor do we access, sell, or process it for our own business purposes.

4. Legal Basis for Processing

  • Contractual necessity – to provide and maintain the Service.
  • Legitimate interest – for product analytics and service improvement.
  • Legal obligation – to comply with accounting and tax requirements.
  • Consent – for marketing communications and optional newsletters.

5. Data Storage and Retention

  • All data is stored on secure AWS servers in Ireland.
  • No data is permanently stored at subprocessors such as Google Document AI or OpenAI; these are used only for real-time processing.
  • User data is retained for two years from the date of registration.
  • Processed data is retained while the subscription is active.
  • All data is deleted within six (6) months after the subscription ends or within one (1) month of a verified deletion request.

6. Data Sharing and Subprocessors

Trusted third parties that assist in operating the Service:

  • Google Document AI – text extraction from receipts (EU/Ireland)
  • OpenAI – receipt text interpretation (EU/US as applicable)
  • Google Analytics – site analytics (EU/US)
  • Meta Pixel – marketing performance tracking (EU/US)
  • Straumur – payment processing (Iceland)
  • AWS – data storage and hosting (Ireland)

All subprocessors comply with GDPR and are bound by data processing agreements.

7. User Rights (GDPR)

You have the right to:

  • Access your personal data
  • Correction of inaccurate data
  • Deletion of your data
  • Restriction of processing
  • Data portability
  • Object to processing
  • File a complaint with the Icelandic Data Protection Authority (Persónuvernd)

To exercise your rights, contact support@expensedock.com.

8. Marketing Communications

We may send marketing or product update emails to registered users or newsletter subscribers. Users can opt out at any time via unsubscribe links in emails or through account settings. We may still send service-related communications (e.g., billing, security alerts).

9. Security

We use appropriate technical and organizational measures to protect data against unauthorized access, loss, or alteration. However, no system is entirely secure, and data transmission over the internet carries inherent risks.

10. International Data Transfers

Certain subprocessors may process data outside the EEA. We use EU Standard Contractual Clauses (SCCs) and other safeguards to maintain GDPR compliance.

11. Changes to This Policy

We may update this Privacy Policy. Users will be notified by email of significant changes. The Effective Date above indicates the most recent revision.

12. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of Iceland. Disputes shall be resolved by the District Court of Reykjavík.

13. Contact Us

Live Shuttle ehf.
Biskupsgata 5, 113 Reykjavík, Iceland
Email: support@expensedock.com