Privacy, explained with precision.

Depending on how you use Feather, we may collect:

• Account and profile data, such as your name, work email, role, organization, department, cost center, locale, and authentication identifiers.
• Expense and finance data, including receipts, invoices, amounts, merchants, expense descriptions, approvals, accounting classifications, tax details, and audit history.
• Communications and integration data, including messages, files, and identifiers from channels you or your organization connect to Feather.
• Usage and technical data, such as IP address, device and browser information, timestamps, request identifiers, logs, and security events.
• Information you provide directly, including demo requests, support inquiries, corrections, and feedback.

Feather requests the Google OAuth scope https://www.googleapis.com/auth/calendar.events.readonly. This permission allows Feather to view calendar events available to the connected Google account. Feather currently queries the account's primary calendar. The permission does not allow Feather to create, modify, or delete calendar events.

When you connect Google Calendar, Feather may access event identifiers, titles, descriptions, start and end times, time zones, locations, organizers, creators, attendees, attendee response status, conference information, event status, and related event metadata. Feather queries events near the relevant expense date or time and uses that context to help match a receipt to a business event, identify attendees, support expense allocation, and validate business purpose.

Feather's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

We use information to:

• Provide, secure, maintain, and improve the Feather platform.
• Process expenses and supporting documents.
• Extract, validate, classify, route, reimburse, and reconcile expense records.
• Apply organization policies, approval rules, accounting logic, and tax treatment.
• Match expenses with relevant calendar and communication context.
• Detect fraud, abuse, duplicate submissions, security incidents, and service errors.
• Provide support, service notices, and requested communications.
• Comply with law and enforce our agreements.

We may disclose information:

• To the organization that provides or administers your Feather workspace and to its authorized users.
• To service providers that support hosting, authentication, communications, document processing, security, analytics, customer support, and AI-assisted product functions, subject to contractual and security controls.
• When you direct us to connect an integration or send data to another service.
• When required by law, legal process, or a valid government request, or when reasonably necessary to protect rights, safety, and platform integrity.
• As part of a merger, financing, acquisition, or sale of business assets.

We do not sell personal information or Google user data.

We retain personal information for as long as necessary to provide the services, meet contractual and legal obligations, preserve required financial and audit records, resolve disputes, and protect the platform. Retention periods vary by record type and workspace configuration.

Google OAuth credentials are stored in encrypted form. Relevant Calendar matches and derived context may be retained with an expense, submission, or audit record when needed to explain a business decision. We use administrative, technical, and organizational safeguards designed to protect information, but no method of storage or transmission is completely secure.

You can revoke Feather's Google access at any time from your Google Account's third-party connections page. Revocation prevents future Calendar access but does not automatically remove records that must be retained for security, legal, financial, or audit purposes.

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal information, or object to certain processing. Contact your workspace administrator or email yair@featherglobal.com. We may need to verify your identity and authority before completing a request.

Feather and its service providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for international transfers and process information in accordance with applicable data protection law.

We may update this policy as Feather evolves or legal requirements change. We will post the updated policy here and revise the effective date. If a change materially affects how we use personal information, we will provide additional notice where required.

Questions or privacy requests can be sent to yair@featherglobal.com.