Privacy policy

WeSettle runs on infrastructure controlled by your organisation. Personal data is stored only in your database and your object storage.

Data we collect

• Account data: email, name, hashed password or OAuth identifiers.
• Business data you enter: clients, invoices, quotes, expenses, payments.
• Usage metadata: audit logs, IP addresses for security alerts, email delivery events.

Your rights

You may export or delete your organisation data at any time from Settings → Privacy. Deletion triggers a 30-day soft-delete before permanent removal.