Privacy Policy

Effective Date: July 31, 2026

Protecting your private information is our priority. This privacy policy applies to the collection, use and disclosure of personal information we receive from users of Stampli website, our AP invoices approvable process services offered through the website application, and our other online or offline offerings that link to, or are otherwise subject to, this Privacy Policy (collectively the “Website” or “Service”).

Disclosure Regarding the California Consumer Privacy Act (Notice at Collection). For information on our processing of personal information that is subject to the California Consumer Privacy Act (“CCPA”), please see Annex A – Supplemental CCPA Privacy Policy.

Disclosure Regarding Customer Data. This Privacy Policy does not apply to the personal information that we process on behalf of our customers a “processor” or “service provider” pursuant to a data processing agreement we have entered into with such customers (“Customer Data”). Our customers’ respective privacy notices or policies govern their collection and use of Customer Data. Our processing of Customer Data is governed by the contracts that we have in place with our customers, not this Privacy Notice. Any questions or requests relating to Customer Data should be directed to our customer.

What Information Stampli Collects and How We Use It

We collect and use the following data:

Account Information. When you sign up for us to provide Services, our Website asks you to choose a username and password and to provide various types of information, some of it relating to the corporate entity on behalf of which you will be using Stampli, some of it related to individuals. Some of the latter is personal information (“Personal Information”) about:

you, either in your personal capacity or in your role of administering a Stampli account for a corporate entity;
your employees who will be using the Website; and/or
anyone you sign up to interact with your company on Stampli.

The provided information includes:

Your company’s name, business information (number of employees, accounting system(s), etc.), billing and mailing address, phone and fax number, LinkedIn and Twitter profile, contact person
The names, work phone numbers, department, title and work email addresses of your employees who will be using the Website and Services.
Suppliers’ information, name, title, email, phone number billing address and for those of US customers that are using the payment application add Bank Account information.
Other specified information by your specific request for the automatization process.
A credit card to pay for your subscription to Stampli.

If you enroll an individual on the Stampli app, we will ask that person to provide a name and email address and to choose a password. In addition, if you invite a vendor to connect to the service, we will ask the vendor to provide the same types of information that we asked you to provide.

Stampli uses Personal Information, including contact information to provide you with updated information and service your account in other ways. We may also use this information in connection with our marketing activities including, without limitation, to market to you on certain platforms or services and to contact you about additional products or services that may be of interest to you. You will have an opportunity to “opt out” of our marketing communications in the future, if you so choose, upon request.

Use of Cookies.

The Stampli Website may use “cookies” to help you personalize your online experience with us. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you personalize Stampli pages, register on the Stampli Website or request Services, a cookie helps Stampli to recall your specific information on subsequent visits. This simplifies the process of recording your information, such as billing addresses, shipping addresses, and so on. When you return to the same Stampli website, the information you previously provided can be retrieved, so you can easily use the Stampli features that you customized.

You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Stampli Services or websites you visit.

For detailed information go to Cookies Policy.

Information from other sources. We may obtain information about you from third parties from time to time. We use this information to help us improve our products and services that may be of interest to you and to validate the information you have provided to us. This helps us maintain the accuracy of the information we collect about you in order to provide you with better service.

Information collected from Google or Outlook. If you integrate Stampli with Gmail, Outlook 365, Google Calendar, and/or Outlook 365 Calendar (“Email and Calendar Services”), we may collect Personal Information from the Email and Calendar Services, including, but not limited to, subject lines, sender/recipient addresses, message body, attachments, metadata, from your emails and event titles, dates and times, attendee names and emails, descriptions, locations, and meeting links from your calendar (collectively, “Email and Calendar Data”). We may use Email and Calendar Data to provide the Services that you have requested from us. This may include, but is not limited to, reviewing your inbox for receipts, invoices, and purchase confirmations to pre-fill expense entries, enrich expense creation with meeting context, and detect general business workflow action items.

Email and Calendar Data obtained from Google is subject to the Google API Services User Data Policy.

Non-Personal Information. We may also collect other non-identifying information as part of the registration and personalization process (e.g., zip code and individual preferences). Certain non-identifying information would be considered a part of your Personal Information if it were combined with other identifiers (e.g., combining your zip code with your street address) in a way that enables you to be identified. However, the same pieces of information are considered non-identifying information when they are taken alone or combined only with other non-identifying information (e.g., your viewing preferences). We may combine your Personal Information with non-identifying information and aggregate it with information collected from other users to attempt to provide you with a better experience, to improve the quality and value of the Website and to analyze and understand how the Website is used.

Aggregate Website Visitor Information: Stampli collects the name of the domain through which you access the internet; the date and time you access our Website; the internet address from which you linked to our Website; and the individual address of the computer you used to access our Website. We use this information in the aggregate to administer our Website, to help diagnose and troubleshoot potential server malfunctions, and to gather broad demographic information about usage of our Website.

De-Identified Data: Stampli and its service providers may: (i) compile de-identified data in connection with providing the Website; and (ii) use, disclose, and retain de-identified data for their business purposes. If we create or receive de-identified data, we will not attempt to reidentify such data unless doing so is permitted by, or we are required to do so to comply with, applicable laws.

How Information May Be Shared

We will only share Personal Information with third parties in the ways that are described in the privacy policy or as permitted by law.

Service Providers and Other Third Parties. We share your Personal Information with third parties as needed to maintain, support and operate the Website, to perform website-related services, to undertake the Services we are providing and to assist us in analyzing how our Website is used (e.g., maintenance services, database management, payment processing, web analytics and improvement of the Website’s features). We may share your Personal Information with companies that assist us with our marketing activities including, but not limited to, social media platforms. We may provide Personal Information to your suppliers who are party to your Stampli transaction for the purpose of providing Services to you. Additionally, Stampli and its service providers may use and disclose information that Stampli customers provide for purposes that Stampli customers consent to. Stampli will collect such consents separately from this Privacy Policy.

Third Parties Unaffiliated with Stampli. We may provide Personal Information to your suppliers who are a party to your Stampli transaction for the purpose of providing Services to you. Additionally, Stampli may permit you to use third party services whose products can be supported through the Stampli Website, such as third-party data entry service, accounting software providers, and Email and Calendar Services. Stampli will share Personal Information and support the third parties’ services on the Stampli Website at your direction. When you direct Stampli to share Personal Information with third parties, you agree that Stampli is not responsible for the third parties’ use, misuse, or handling of that Personal Information.

Compliance with Laws and Law Enforcement. Stampli cooperates with government and law enforcement officials or private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect the property and rights of Stampli or a third party, to protect the safety of the public or any person, or to prevent or stop any illegal, unethical or legally actionable activity.

Business Transfers/Transactions. Information, including Personal Information, that we collect from our users is considered to be a business asset. As a result, if we go out of business or enter bankruptcy or if we are acquired as a result of a transaction such as a merger, acquisition, reorganization or asset sale, your Personal Information may be disclosed, sold or transferred to the third-party acquirer in connection with the transaction.

Aggregate Information and Non-Identifying Information. We may share aggregated information which does not include Personal Information and we may otherwise disclose non-identifying information and log data with third parties for industry analysis, demographic profiling and other purposes. Any such aggregated information will not contain your Personal Information.

Links to Other Sites

The Website may provide links to other sites. If you choose to visit another site by “clicking on” an external link, you will be directed to that party’s site. We may track whether these links have been followed to improve the quality of the Website and Stampli partnership activities. The fact that we link to another site is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party sites. These other sites may place their own cookies or other files on your computer, collect data or solicit Personal Information from you. This privacy policy addresses the use and disclosure of information that we collect from you through this Website. Other sites follow different rules regarding the use or disclosure of the Personal Information you submit to them. We encourage you to read the privacy policies or statements of the other sites you visit.

Data Retention

We will retain and use your information in accordance with our internal retention, archiving and back-up regimens. We may retain certain Personal Information about you for as long as necessary for the purposes described in this Privacy Policy, which includes keeping contact information after you have cancelled your service with us for the period of time needed for us to pursue legitimate business interests, conduct audits, comply with and/or demonstrate our legal obligations, resolve disputes and enforce our agreements. If you have any questions about data retention policy please contact us by e-mail at [email protected].

Our Website includes social media features, such as the Facebook Like button and widgets, such as the Share this button or interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Website. Your interactions with these features are governed by the privacy policy of the company providing it.

Declining to provide your personal information

If you do not provide information indicated as required or mandatory within the Service, or that is otherwise necessary to provide a requested service or feature within the Service, that portion or all of the Service may be unavailable to you and we may deactivate your account.

Your Rights

The Stampli app enables you to update, correct, and delete/remove Personal Information regarding you, your employees at any time on the Website app. If you want to cancel our service, contact us by e-mail at [email protected] at any time. This privacy policy will continue to apply if you cancel our service, or if you are no longer our customer for any reason. If you have any concerns about how Stampli stores or uses Personal Information, please contact us by e-mail at [email protected].

Stampli has no direct relationship with the individuals whose personal information is contained within the Customer Data processed by the Services. An individual who seeks to access, correct or delete this information should direct their request the Customer. Then if the Customer send us the request for fulfilling, we proceed as in this policy after receiving a direct request from the Customer.

To the extent that Stampli’s processing of your Personal Information is subject to the General Data Protection Regulation (“GDPR”), Stampli processes Personal Information to provide the Services and for our legitimate interests, such as improving the Services.

The GDPR grants individuals located in the European Union, and the UK certain rights regarding their Personal Information. For example, under the GDPR, you have the right to access, correct, receive a copy of, and delete your Personal Information. You also have a right to object to our use of your Personal Information for direct marketing purposes and the right to request that we restrict further processing of your Personal Information under certain situations. Subject to applicable law, you may also have the right to lodge a complaint with your local data protection authority.

If you would like to exercise and of your rights under the GDPR, please feel free to reach out to us via one of the means set out in the “Contact Us” section below.

CCPA Rights

If you are a resident of the state of California, please refer to our Supplemental CCPA Privacy Policy located below for information about your rights under the CCPA

International Transfers

Our servers are located in Europe and the United States and to provide you with the Services, we may store, process and transmit information to the United States. We may transfer information that we collect about you, including Personal Information, to affiliated entities, or to other third parties (as provided herein) across borders and from your country or jurisdiction to other countries or jurisdictions around the world. If you are located in the European Union or other regions with laws governing data collection and use that may differ from laws of the United States and state law, please note that you are transferring information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction, and you consent to the transfer of information to the United States and the use and disclosure of information about you, including personal information, as described in this Privacy Policy.

Protection of Children’s Personal Information

To the extent prohibited by applicable law, Stampli does not allow our Services to be used by anyone younger than 16 years old and further does not knowingly collect Personal Information from children.

Changes to This Privacy Policy

If we decide to change our privacy policy, we will post those changes to this privacy policy page, the home page, and other places we deem appropriate, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. We reserve the right to modify this privacy statement at any time, so please review it frequently. If we make material changes to this policy, we will notify you here, by email, or by means of a notice on our home page prior to the change becoming effective. Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes in the Service (or as otherwise indicated at the time of posting). If you disagree with any changes to this Privacy Policy, you should terminate your Services with us and contact us if you want to exercise any of your rights described in this Privacy Policy.

Passwords

When you sign up for Stampli, you provide an email address and password to access our Website. You can help protect your information by using a strong password, keeping your password secret and by changing it from time-to-time.

Contact Us

If you have any questions about this Privacy Policy or if you would like to exercise any of your rights described in this Privacy Policy, you can contact us by any of the means below.

Stampli, Inc.
800 California St., Floor 2
Mountain View, California 94041

Email: [email protected]

Annex A – Supplemental CCPA Privacy Policy

Personal Information Collected. See the section of this Supplemental CCPA Privacy Policy titled “Overview of Personal Information Collected, Disclosed, Sold, and/or Shared” for a list of personal information that may be collected. If we have previously collected personal information in the past 12 months, we may collect that personal information from you.
Uses of Personal Information. See the section of this Supplemental CCPA Privacy Policy titled “Uses of Personal Information” for a list of the purposes for which we use personal information.
Is Personal Information “Sold” or “Shared” for “Cross-Context Behavioral Advertising”? Yes. See the section of this Supplemental CCPA Privacy Policy titled “Overview of Personal Information Collected, Disclosed, Sold, and/or Shared” for more details. If we have previously “sold” personal information or “shared” personal information for “cross-context behavioral advertising” in the past 12 months, we may “sell” or “share” that personal information if collected from you. See the section of this Supplemental CCPA Privacy Policy titled “Right to Opt Out of ‘Sales’ of Personal Information and/or ‘Sharing’ for ‘Cross-Context Behavioral Advertising’” for instructions on how to opt out of these activities.
How Long Is Personal Information Retained? To determine the appropriate retention period for personal information, we may consider applicable legal requirements; the amount, nature, and sensitivity of the personal information; certain risk factors; the purposes for which we process your personal information; and whether we can achieve those purposes through other means.
Additional Information. For more information on our privacy practices, please review this Supplemental CCPA Privacy Policy and our Privacy Policy. Importantly, the section of this Supplemental CCPA Privacy Policy titled “Your Rights Under the CCPA” includes important details about how you can exercise certain rights under the CCPA.

Categories of Sources From Which Personal Information is Collected

We collect personal information that you provide to us, personal information we collect automatically when you use the Service, and personal information from third-party sources.

Overview of Personal Information Collected, Disclosed, Sold, and/or Shared

The CCPA provides California residents with the right to know what categories of personal information Stampli has collected about them, whether Stampli disclosed that personal information to a service provider or a contractor for a business purpose, whether Stampli “sold” that personal information, and whether Stampli “shared” that personal information for “cross-context behavioral advertising” in the preceding 12 months. California residents can find this information below:

Category of Personal Information Collected by Stampli	Did Stampli Disclose the Personal Information to a Service Provider or a Contractor for a Business Purpose?	Category of Third Parties Whom Personal Information Is Sold and/or Shared
Identifiers	Yes	Providers of advertising services
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	Yes	Providers of advertising services
Commercial information	Yes	Providers of advertising services
Internet or other electronic network activity	Yes	Providers of advertising cookies
Geolocation data	Yes	Not applicable
Professional or employment-related information	Yes	Providers of advertising services
Inferences drawn from other personal information to create a profile about a consumer	Yes	Providers of advertising cookies
Personal information that reveals a consumer’s social security, driver’s license, state identification card, or passport number	Yes	Not applicable
Personal information that reveals a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account	Yes	Not applicable
Personal information that reveals the contents of a consumer’s mail, email, and text messages unless Stampli is the intended recipient of the communication	Yes	Not applicable

Use of Personal Information

We may use and disclose the personal information that we collect for the business and commercial purposes listed in our Privacy Policy and for the following business and commercial purposes:

Helping to ensure security and integrity to the extent the use of personal information is reasonably necessary and proportionate for these purposes;
Debugging to identify and repair errors that impair existing intended functionality;
Maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar Services;
Undertaking internal research for technological development and demonstration; and
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Stampli, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Stampli.

Your Rights Under the CCPA

Under the CCPA, you have the right to:

Request Access to or Portability of Your Personal Information;
Request Correction of Your Personal Information; and
Request Deletion of Your Personal Information.

If you would like to exercise any of the other rights described above, please contact us as set forth below:

Stampli, Inc.
800 California St., Floor 2

Mountain View, CA 94041

Email: [email protected]

Toll-Free Phone Number: 877-765-3127

Only you, or someone legally authorized to act on your behalf, may make a request to exercise the rights listed in this Supplemental CCPA Privacy Policy. If you wish to designate an authorized agent, please provide written authorization signed by you and your designated agent using the information found in above and ask us for additional instructions.

To protect your privacy, we will take steps to verify your identity before fulfilling certain requests submitted under the CCPA. These steps may involve asking you to provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information or an authorized representative. Examples of our verification process may include asking you to confirm the email address we have associated with you.

Right to Opt out of “Sales” of Personal Information and/or “Sharing” for “Cross-Context Behavioral Advertising”

We “sell” your personal information or “share” your personal information for “cross-contextual behavioral advertising” to provide you with marketing about Stampli’s products and services including, but not limited to, “cross-context behavioral advertising” about Stampli’s products and services.

California residents have the right to opt out of the “sale” of personal information and the “sharing” of personal information for “cross-context behavioral advertising.” California residents may exercise these rights by clicking here and following the instructions on the webpage they are taken to.

Disclosure Regarding Opt-out Preference Signals

California residents may opt out of “sales” of personal information and “sharing” of personal information for “cross-context behavioral advertising” that are carried out on Stampli.com through cookies or similar technologies by broadcasting the opt-out preference signal known as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, visit the Global Privacy Control website. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use to visit https://www.stampli.com/.

Disclosure Regarding Individuals Under the Age of 16

Stampli does not have actual knowledge of any “sale” of personal information of minors under 16 years of age. Stampli does not have actual knowledge of any “sharing” of personal information of minors under 16 years of age for “cross-context behavioral advertising.”

Disclosure Regarding Sensitive Personal Information

Stampli uses and discloses sensitive personal information only for the purposes set forth in Section 7027(m) of the CCPA regulations.

No Retaliation for the Exercise of Rights Under the CCPA

California residents have the right not to be retaliated against by us for the exercise of their rights conferred by the CCPA.