Privacy Policy

We only collect data necessary to provide and improve our service. Account and identity: email and name (if you provide it) when you sign up or log in. Content you provide: receipt images or PDFs you upload, and messages you send via our contact form. Usage data: how you use the product (e.g. feature usage) to improve experience and troubleshoot. Technical data: IP, browser type, device information for security, load, and compatibility. Payment-related: subscriptions and payments are handled by Creem; we only store subscription-related identifiers (e.g. subscription ID), not full card numbers.

We use your data to: perform our contract with you (sign-in, upload, parsing, export, etc.); process subscriptions and payments (via Creem); improve the product (usage analysis in anonymized or aggregated form); send you important service-related notices (e.g. billing, security, or policy changes); and comply with legal obligations when required. We do not use your personal information for third-party marketing or sell it to data brokers. Where the law requires, we rely on contract performance, legitimate interests, or your consent.

We do not sell your personal information. We share only when necessary with: infrastructure and hosting providers (e.g. cloud storage, compute) to run the site and store receipts; payment processor (Creem) to complete subscriptions and charges; and regulators or law enforcement when required by law or to protect rights and safety. These parties are bound by contract or law to use data only for the purposes we specify. We do not use your receipt or expense data for advertising or share it with advertisers.

We do not retain your data long-term; we only keep it for a short period as needed to provide the service. Account and receipt data are retained while you use the service; you can delete individual receipts or export and then delete from your account settings. If you close your account, we will delete or anonymize your personal information within a reasonable period, except where we must retain it by law (e.g. transaction records). Once deleted, data cannot be recovered.

You have the right to: access the personal information we hold about you; correct inaccuracies; request deletion (where we have no lawful reason to retain); export your data where the law allows; opt out of marketing communications if we send them; withdraw consent where processing is based on consent. You can submit requests via account settings, our contact page, or your registered email; we will respond within the timeframes required by law. If you are in the EEA or similar regions, you may also lodge a complaint with your local data protection authority.

We use industry-standard measures to protect your data: encryption in transit (HTTPS/TLS), access controls on storage, and least-privilege access. Your receipt and expense data are accessed only when needed to deliver the service; we do not use them for purposes unrelated to the product. No transmission or storage can be guaranteed fully secure; please keep your account credentials safe.

We may update this policy when the law or our product changes. We will notify you of material changes on the site or via your registered email; continued use of the service after that constitutes acceptance of the updated policy. The "Last updated" date at the top shows the current version. For privacy questions or to exercise your rights, contact us via our contact page or your registered email.