Privacy Policy

Last updated: February 13, 2026

IslandSpend, operated by Old Road Rum Ltd. ("Company," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our expense management platform, including all associated web applications, APIs, and related services (collectively, the "Service").

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using the Service, including:

  • Account Information: Name, email address, job title, and company details when you register for an account.
  • Financial Data: Expense records, receipt images, credit card statements, transaction details, amounts, merchant names, and categorization data that you upload or enter into the Service.
  • Corporate Card Data: Virtual card details, spending limits, and transaction history associated with cards created through the Service.
  • Communications: Any messages, feedback, or support requests you send to us.

1.2 Information Collected Automatically

When you access the Service, we may automatically collect:

  • Usage Data: Pages visited, features used, timestamps, and interaction patterns.
  • Device Information: Browser type, operating system, device identifiers, and IP address.
  • Cookies and Similar Technologies: Session cookies for authentication and preferences.

1.3 Information from Third-Party Services

When you connect third-party services, we may receive:

  • QuickBooks Online: Company information, chart of accounts, vendor lists, and expense account details when you authorize the QuickBooks integration.
  • Email Services: Email content related to receipts and purchase confirmations when you authorize email scanning for receipt matching.
  • Authentication Providers: Basic profile information (name, email) from OAuth providers used for login.

2. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve the Service.
  • Process and categorize your expenses using AI-powered analysis.
  • Extract transaction details from receipt images and credit card statements.
  • Match email receipts with corresponding expenses.
  • Synchronize financial data with QuickBooks Online when authorized.
  • Generate reports, analytics, and spending insights.
  • Enforce spending policies and approval workflows.
  • Send notifications related to approvals, policy violations, and system updates.
  • Respond to your inquiries and provide customer support.
  • Detect and prevent fraud, abuse, and security incidents.

3. AI Processing

The Service uses artificial intelligence and machine learning models to process receipt images, categorize expenses, and extract transaction data from credit card statements. This processing may involve sending your data to AI service providers (such as OpenAI) for analysis. We ensure that such providers are bound by appropriate data processing agreements. AI-generated results are provided on a best-effort basis and should be reviewed for accuracy.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: With third-party vendors who assist in operating the Service (cloud hosting, AI processing, payment processing), subject to confidentiality obligations.
  • Third-Party Integrations: With services you explicitly authorize (e.g., QuickBooks Online), limited to the data necessary for the integration to function.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.
  • With Your Consent: In any other circumstances where you provide explicit consent.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption of data in transit (TLS/SSL), secure storage of authentication tokens, role-based access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Financial records and transaction data are retained in accordance with applicable accounting and tax regulations in Saint Kitts and Nevis. You may request deletion of your account and associated data by contacting us, subject to legal retention requirements.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information.
  • Object to or restrict certain processing of your information.
  • Request portability of your data in a structured, machine-readable format.
  • Withdraw consent for processing where consent is the legal basis.

To exercise any of these rights, please contact us at the address provided below.

8. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Saint Kitts and Nevis, including the United States, where our cloud infrastructure and AI service providers are located. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a revised "Last updated" date. Your continued use of the Service after such changes constitutes your acceptance of the revised policy.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

IslandSpend — Old Road Rum Ltd.
Old Road, Saint Kitts and Nevis
Email: [email protected]

Privacy PolicyEULAIslandSpend