Privacy Policy

Galvin Ventures Inc. (“we,” “us,” or “our”) provides Qevra, a mileage, expense and receipt-recordkeeping service for individuals and business teams. This Privacy Policy explains what information we collect, why we use it, how it may be shared, how long it is retained, and the choices available to users.

1. Information We Collect

Account and identity information

We may collect your name, email address, company or organization name, role, account identifiers, login/authentication information, and information used to invite or manage team members.

Location and trip information

We collect the start and end locations you enter, trip dates and timestamps, distance, business purpose, classification, and related mileage information to provide mileage and trip-recordkeeping features. Mapping services may process the entered locations to calculate distance or display location labels.

If you choose to use a device-location feature to fill in an endpoint, it may require location permission. You may manage that permission through your device settings.

Expense and receipt information

We may collect expense date, merchant, amount, category, business purpose, payment-related reference information you enter, notes, attachments, and photographs or images of receipts. If optical character recognition or similar processing is enabled, receipt images may be processed to extract transaction details.

Vehicle and business-record information

We may collect vehicle descriptions and identifiers you provide, mileage classifications, business purpose, reimbursement information, employee/team assignment, approvals, edits, reporting history and other records needed to organize mileage and expenses.

Device, diagnostics and usage information

We may collect device type, operating system, app version, IP address, crash information, security logs, diagnostic events, and limited usage information needed to operate, secure and improve the service. If analytics or third-party SDKs are used, their data collection must be disclosed in the applicable App Store privacy information and Google Play Data safety form.

Support communications

If you contact us, we may collect the content of your request, your contact information, and related support records.

2. How We Use Information

• Provide mileage, expense and receipt-recordkeeping features.
• Create and organize trip and expense records from information you submit.
• Display records to authorized business administrators and users.
• Create reports, exports and summaries requested by users or business customers.
• Store receipt images and supporting documentation according to the customer’s retention settings and our retention practices.
• Provide customer support, troubleshoot problems, prevent abuse and secure accounts.
• Maintain service reliability, perform diagnostics and improve product functionality.
• Comply with legal obligations and enforce applicable agreements.

3. Business Accounts and Administrator Access

If your account is provided through or linked to an employer or other business customer, authorized administrators for that organization may be able to view, manage, approve, export, retain or delete mileage, expense, receipt and account information associated with the organization. The business customer may determine how its employees are expected to use the service and how long business records should be retained.

Where we process information on behalf of a business customer, that business may be responsible for providing additional notices to its employees and establishing lawful workplace policies for trip records and record retention.

4. When We Share Information

We may share information only as reasonably necessary to provide and protect the service, including with:

• Your organization: authorized administrators and other users according to account permissions.
• Service providers: hosting, cloud storage, authentication, database, email, customer-support, OCR, mapping/location, analytics, security and similar vendors that process information for us.
• Professional advisers: legal, accounting, insurance or security advisers where reasonably necessary.
• Legal and safety purposes: where required by law, legal process, or to protect rights, safety and service integrity.
• Business transfers: in connection with a merger, acquisition, financing, reorganization or sale of assets, subject to appropriate protections.

We do not sell personal information or use precise location or receipt/expense information for third-party behavioral advertising. If our practices change, we will update this policy and applicable app-store disclosures before using data for a materially different purpose where required.

5. Data Retention

Business mileage, expense and receipt records are retained according to the applicable account, customer configuration and contractual requirements so customers can maintain long-term supporting business documentation. Different categories of data may have different retention periods.

When an account or data-deletion request is approved, we delete or de-identify data that is no longer required, subject to legitimate retention needs such as contractual commitments to the business account owner, security, fraud prevention, dispute resolution, legal obligations, or tax and recordkeeping requirements. Data in backups may remain for a limited backup-rotation period before being overwritten.

6. Security

We use administrative, technical and organizational safeguards designed to protect information appropriate to its sensitivity. Because location and receipt records can contain sensitive information, the production service should encrypt data in transit and at rest, restrict administrative access, maintain access logs, and apply role-based authorization. No system can guarantee absolute security.

7. Your Choices and Rights

• You may manage device permissions, including location and camera/photo access, in your device settings.
• You may access and update certain account information through the app.
• You may request account and associated data deletion as described on our Delete Account page.
• You may contact us to ask about access, correction, deletion, portability, restriction or other privacy rights available under applicable law.

For business-managed accounts, certain records may be controlled by the business customer and may need to be retained under the organization’s policies or legal obligations. We may refer requests involving employer-controlled data to the applicable administrator.

8. Children

The service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the service. Business customers should not create accounts for users who are not permitted to use the service under applicable law or app-store requirements.

9. U.S. State Privacy Rights

Depending on where you live, state privacy law may provide rights regarding access, correction, deletion, portability, or certain uses of personal information. We will honor verified requests as required by applicable law. We do not sell personal information or share personal information for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws, unless this policy is updated to disclose otherwise.

10. International Users

If the service is offered outside the United States, additional privacy rights and transfer requirements may apply. This policy should be supplemented before launching in jurisdictions that require additional disclosures or contractual mechanisms.

11. Changes to This Policy

We may update this Privacy Policy as the service, laws or our data practices change. We will post the updated version on this page and revise the effective date. Material changes will be communicated as required by applicable law.

12. Contact Us

Privacy questions or requests may be sent to privacy@yourdomain.com.