Lydgr Privacy Policy
Last updated: May 22, 2026
InTechNova ("we", "us", "our") operates Lydgr, an accounting and expense-management application available as a web app and as a mobile app on iOS and Android (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
1. Information We Collect
- Account Information: Your email address, display name (username), and a hashed copy of your password when you register. We also record whether you have accepted the Terms and Disclaimer at registration.
- Company & Membership Data: Companies you create or join, your role within each company (e.g. Owner, Accounting, Regular), and other members' display-only information needed to collaborate.
- Receipt & Expense Data: Receipt images and PDFs that you upload or capture with your camera, together with the metadata you enter — for example merchant, amount, currency, date, category, tax, and notes.
- Bank & Transaction Data (optional): If you choose to connect a bank account through our third-party financial-data provider, we receive transaction history, account balances, and institution metadata for the accounts you select. We never receive your bank login credentials — those are entered directly into the provider's secure flow. The provider acts as an independent data processor under its own privacy policy.
- Usage Data: Log data such as IP address, browser or device type, pages visited, API requests, and timestamps, used for security monitoring and performance diagnostics.
- Device Data: On the mobile app we may collect a device identifier and OS version for crash diagnostics and, if you opt in, for push-notification delivery. Receipt capture uses your device camera and photo library only with your explicit permission, and images are uploaded only when you save a receipt.
2. How We Use Your Information
- To provide, operate, and maintain Lydgr — including storing receipts, syncing bank transactions you have connected, generating reports and exports, and enabling the approval workflow.
- To authenticate users and enforce role-based access control across companies (Owner, Accounting, Regular).
- To send operational notifications such as password-reset emails, approval requests, and in-app or email alerts about your account.
- To monitor and improve service performance, reliability, and security, including abuse and fraud prevention.
- To comply with applicable legal and tax obligations.
3. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information or financial data to third parties, and we do not use your data for advertising.
We share data only with:
- Cloud Infrastructure Providers: We use Microsoft Azure to host the Service, including Azure Database (PostgreSQL via Prisma), Azure Blob Storage for receipt files, Azure Key Vault for secrets, and Azure Communication Services for transactional email. Data is processed in accordance with Azure's data-processing terms.
- Financial-Data Provider (bank linking, optional): If you connect a bank account, our third-party financial-data provider acts as the financial-data aggregator and receives the credentials you provide to your bank. We store only the access tokens (encrypted at rest) and the transaction data the provider returns for the accounts you have authorized.
- Other Members of Your Company: Receipts, expenses, and reports are visible to other members of the same company in accordance with their role. You are responsible for who you invite into a company you administer.
- Legal Requirements: We may disclose information if required by law, regulation, legal process, or to protect the rights, property, or safety of InTechNova, our users, or others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to this Privacy Policy.
4. Data Retention and Deletion
We retain your account, company, and operational data for as long as your account is active or as needed to provide the Service. Deleted receipts, users, and companies are moved to a recycle bin and can be restored by an administrator for a limited period before being permanently purged.
You may request deletion of your account and associated data, or disconnection of a linked bank, by contacting us at support@intechnova.co. Some records may be retained for the period required by applicable accounting, tax, or legal-retention laws.
5. Data Security
We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), salted password hashing (bcrypt), JWT-based authentication, role-based access controls, and encryption at rest in Azure Key Vault for sensitive secrets such as bank-connection access tokens. No method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Your Rights
Depending on your jurisdiction (including, where applicable, the GDPR in the EEA/UK and PIPEDA in Canada), you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data.
- Object to or restrict certain processing activities.
- Request portability of the data you have provided to us, in a structured, machine-readable format.
- Withdraw consent for optional integrations (such as bank linking) at any time.
To exercise these rights, contact us at support@intechnova.co.
7. Cookies and Local Storage
The Lydgr web app uses browser localStorage to store your authentication token and user preferences. The mobile app stores the same authentication token in device-secure storage (iOS Keychain / Android Keystore via Expo SecureStore). We do not use third-party tracking cookies, advertising cookies, or cross-site analytics trackers.
8. Children's Privacy
Lydgr is a business accounting tool and is not directed at children under 16. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.
9. International Data Transfers
Lydgr is hosted on Microsoft Azure. Depending on the Azure region serving your account, your data may be processed in Canada, the United States, or the European Union. By using the Service you consent to such cross-border processing, subject to the safeguards described in this Privacy Policy and our cloud providers' standard contractual terms.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by in-app or email notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
11. Contact Us
If you have questions or requests regarding this Privacy Policy or your data, please contact:
InTechNova
Email: support@intechnova.co
Website: www.intechnova.co