Privacy, explained with precision.

Depending on how you use Feather, we may collect:

• Account and profile data, such as your name, work email, role, organization, department, cost center, locale, and authentication identifiers.
• Expense and finance data, including receipts, invoices, amounts, merchants, expense descriptions, approvals, accounting classifications, tax details, and audit history.
• Communications and integration data, including messages, files, and identifiers from channels you or your organization connect to Feather.
• Usage and technical data, such as IP address, device and browser information, timestamps, request identifiers, logs, and security events.
• Information you provide directly, including demo requests, support inquiries, corrections, and feedback.

When you connect Google Calendar, Feather requests the Google OAuth scope https://www.googleapis.com/auth/calendar.events.readonly. This permission allows Feather to view calendar events available to the connected Google account. Feather currently queries the account's primary calendar. The permission does not allow Feather to create, modify, or delete calendar events.

When you connect Google Calendar, Feather may access event identifiers, titles, descriptions, start and end times, time zones, locations, organizers, creators, attendees, attendee response status, conference information, event status, and related event metadata. Feather queries events near the relevant expense date or time and uses that context to help match a receipt to a business event, identify attendees, support expense allocation, and validate business purpose.

Google Drive is a separate, optional connection for organizational budgets. When you connect it, Feather requests openid, email, and https://www.googleapis.com/auth/drive.readonly. We use your Google account identifier and verified email to associate the connection with your Feather account. Google's Drive permission allows reading and downloading all files available to the connected account, not only the budget source you select. It does not permit creating, editing, deleting, or changing the sharing of your Drive files.

Feather lists or searches supported Google Sheets and Excel files to let you choose a budget source. This exposes file identifiers, names, types, modification times, and links to the connecting user. After selection, Feather reads the source's metadata and the configured worksheet and cell range; an Excel source is downloaded to read that range. Feather uses this information to import and refresh budgets, map columns, match requests and expenses to budgets, and show budget availability and decision history to authorized workspace users. Selected source content and derived budget information may be processed by AI service providers to support these requested features.

Feather's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

For Google user data, any broader disclosure language elsewhere in this policy is limited by those requirements. Transfers are limited to providing the requested features with your consent, security purposes, legal obligations, or a business transfer with your prior consent. Human access is limited to your affirmative permission, necessary security or legal purposes, or aggregated data used for internal operations as permitted by Google's policy.

We use information to:

• Provide, secure, maintain, and improve the Feather platform.
• Process expenses and supporting documents.
• Extract, validate, classify, route, reimburse, and reconcile expense records.
• Apply organization policies, approval rules, accounting logic, and tax treatment.
• Match expenses with relevant calendar and communication context.
• Import selected budget sources and support budget checks and preapprovals.
• Detect fraud, abuse, duplicate submissions, security incidents, and service errors.
• Provide support, service notices, and requested communications.
• Comply with law and enforce our agreements.

We may disclose information:

• To the organization that provides or administers your Feather workspace and to its authorized users.
• To service providers that support hosting, authentication, communications, document processing, security, analytics, customer support, and AI-assisted product functions, subject to contractual and security controls.
• When you direct us to connect an integration or send data to another service.
• When required by law, legal process, or a valid government request, or when reasonably necessary to protect rights, safety, and platform integrity.
• As part of a merger, financing, acquisition, or sale of business assets.

We do not sell personal information or Google user data.

We retain personal information for as long as necessary to provide the services, meet contractual and legal obligations, preserve required financial and audit records, resolve disputes, and protect the platform. Retention periods vary by record type and workspace configuration.

Google OAuth credentials are stored in encrypted form. Relevant Calendar matches, imported budget rows, source metadata, versioned budget snapshots, and derived context may be retained with a request, expense, submission, or audit record when needed to provide the service or explain a business decision. We use administrative, technical, and organizational safeguards designed to protect information, but no method of storage or transmission is completely secure.

You can revoke Feather's Google access at any time from your Google Account's third-party connections page. You can also disconnect the budget Drive connection in Feather's integration settings; this removes its stored tokens and stops future budget-source refreshes without disconnecting Calendar. Revoking Google access prevents future access under that grant. Disconnecting or revoking access does not automatically erase imported snapshots or records that must be retained for security, legal, financial, or audit purposes. Contact your workspace administrator or us to request deletion, subject to those retention obligations.

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal information, or object to certain processing. Contact your workspace administrator or email yair@featherglobal.com. We may need to verify your identity and authority before completing a request.

Feather and its service providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for international transfers and process information in accordance with applicable data protection law.

We may update this policy as Feather evolves or legal requirements change. We will post the updated policy here and revise the effective date. If a change materially affects how we use personal information, we will provide additional notice where required.

Questions or privacy requests can be sent to yair@featherglobal.com.