Privacy policy

Account identity and company access

The Hub processes your name, account email, company memberships, roles and assigned product permissions to sign you in and open the right company workspace. Account and membership information is checked with the secure EXZOH™ service. Your selected browser stores its normal session cookies.

Sign-in and security information

The service records an IP address, browser or device user-agent information, and session information such as creation, expiry and revocation. Login and two-factor authentication challenge records can include attempt and completion information. These records support account protection, access verification, abuse prevention and troubleshooting.

Product records and files

Travel & Expense operational records and receipt or other evidence files that you save or upload are transferred to your authorized company server workspace and private storage. Customer operational records are kept within the customer's separate company workspace. Opening a product does not grant another company access to those records.

Invoice Studio saves business records and technical files locally by default. Where private cloud backup is available, a company Lead can approve it and you can explicitly choose local storage plus cloud backup for a business. That choice uploads saved business records, document and payment history, settings and attachment originals to private Cloudflare R2 storage. Local-only businesses are not uploaded merely by signing in.

Cloud backups are separated by signed-in account, company, membership and business workspace. They provide explicit recovery into a separate local copy; they do not automatically merge another device's edits or share documents with every employee. Automatic backups require an open, online app with saved changes. Check the last successful backup time, and export a full business backup before clearing local data.

Service providers and the browser

Hosting, private storage and email service providers process the information needed to deliver the service. This includes hosted account and operational information, stored evidence and recovery copies, and the recipient, message and delivery information needed for account or service emails. Support receives information you choose to send when requesting help.

The Android Hub wrapper contains no advertising SDK. It opens secure pages in your selected browser rather than creating its own copy of the company database. Your browser and its provider have their own privacy settings and processing; this statement does not claim that browser telemetry is absent.

The Google Play version of EXZOH™ Operations Hub includes Google's checks that the app was obtained from Google Play. These checks can run when you open the app and may periodically need an internet connection. They are separate from your EXZOH account and company permissions. For information about Google's processing, see the Google Privacy Policy.

Retention and deletion requests

Information is retained while needed to provide the account and company services, protect the service, resolve issues and meet applicable legal or accounting obligations. A deletion request may require separate review of company-owned operational or financial records, security and audit records, and protected recovery copies. We do not promise immediate deletion of every retained category.

You can request account deletion using the account help link below or contact support from your account email. Support verifies identity and explains the data covered by the request, any categories retained for legitimate legal or security purposes, and the applicable process. Deleting a Hub account does not automatically erase Invoice Studio documents stored only in your browser profile. If you enabled Invoice Studio cloud backup, identify that business in a deletion request so support can review its retained recovery copies separately. Turning backup off stops future automatic uploads; it does not immediately delete recovery copies already retained.

Keep passwords, verification codes and complete customer databases out of support messages.