Privacy Policy

Account Information

When you create a Receiptify account, we may collect:

• Your email address
• Your name, if you choose to provide it
• Your password when you register using email and password authentication

Passwords are securely hashed before being stored and are never stored in plain text.

Google Sign-In

If you choose to sign in using Google, we may receive information made available through Google's authentication process, such as:

• Your name
• Your email address
• Your profile image

We do not receive or store your Google account password.

Receipt Information

When you upload a receipt for scanning, Receiptify may process information visible on the receipt, including:

• Merchant name
• Transaction date
• Line items
• Prices and quantities
• Categories
• Merchant address
• Merchant phone number
• Other information contained on the receipt

Receiptify does not intentionally store uploaded receipt images in its own database after the scanning process is completed.

The structured receipt information that you choose to save is stored in your Receiptify account.

Because receipts may contain personal or sensitive information, you should only upload receipts that you are comfortable having processed by our service and the third-party service providers described in this Privacy Policy.

Billing Information

Receiptify uses Paddle to process subscriptions and payments.

Receiptify does not receive or store your full credit card number, bank account details, or other complete payment credentials.

Paddle may provide us with information such as your subscription status and transaction-related information necessary to manage your account and subscription.

Local Preferences

Receiptify may store certain preferences, such as your selected theme and display currency, locally in your browser using localStorage.

These preferences are not sent to our servers unless required for a particular feature.

Authentication Cookies

Receiptify uses a single signed authentication cookie (JWT, 7-day expiry) to keep you signed in. The token's signature lets us verify your identity on every request; no tracking or analytics cookies are used.

When you start a Google sign-in from the signup page, a short-lived, signed consent cookie (10 minutes) records your acceptance of these terms so it can be attached to your new account.

To protect accounts against brute-force attacks, failed sign-in attempts are counted per email address and network for a limited time (about one hour) and then discarded.

We use your information to provide, operate, maintain, and secure Receiptify.

This may include using your information to:

• Create and maintain your account
• Authenticate you and maintain your session
• Process uploaded receipts
• Extract structured information from receipts
• Save and organize receipt information you choose to keep
• Categorize receipt information
• Provide search and export functionality
• Manage subscriptions and usage credits
• Provide customer support
• Maintain and improve the reliability and security of Receiptify
• Detect and prevent fraud, abuse, or unauthorized use
• Comply with applicable legal obligations

We do not sell your personal information.

Receiptify uses third-party artificial intelligence services to process receipt images and extract structured information from them.

When you use the receipt-scanning feature, your uploaded receipt image is securely transmitted to our AI processing providers for analysis. The extracted information may include merchant details, transaction dates, line items, prices, categories, addresses, phone numbers, and other information visible on the receipt.

Receiptify does not intentionally store uploaded receipt images in its own database after processing.

Because receipt images are processed by third-party service providers, the images and associated processing information may be subject to those providers' privacy, security, and data-retention practices.

Receiptify does not use your receipt images to train its own AI models.

Please do not upload receipts containing information that you do not want processed by a third-party service.

Receiptify uses selected third-party services to provide certain features.

AI Processing Providers

Receiptify uses third-party AI services to process receipt images and extract structured receipt information.

These providers process information on behalf of Receiptify as necessary to provide the receipt-scanning functionality. Their handling and retention of information may be governed by their own privacy policies and applicable terms.

Paddle

Paddle processes subscription payments and billing information on our behalf.

Payment information is handled by Paddle according to its privacy policy and applicable terms.

Receiptify does not store your complete payment card or bank account information.

Google

If you use Google Sign-In, Google processes authentication information according to Google's privacy policy.

Receiptify receives only the information made available through the authentication process.

Frankfurter API

Receiptify may use the Frankfurter API to retrieve currency exchange rates for displaying receipt amounts in different currencies.

Only currency-related information, such as currency codes, is sent for this purpose.

Receiptify does not send your receipt images, account information, or saved receipt data to the currency-rate service.

We retain your account information and saved receipt information while your account remains active or for as long as necessary to provide Receiptify.

You can delete individual saved receipts from your account.

You can delete your entire Receiptify account yourself at any time from the Profile page — this permanently removes your account, receipts, and associated data. Alternatively, you may request complete deletion by contacting us at support@receiptify.app.

Receipt images uploaded for scanning are not intentionally stored in Receiptify's database after processing.

Temporary copies may exist during normal technical processing or as part of third-party service operations.

Certain information may be retained for a limited period where necessary for security, fraud prevention, accounting, legal obligations, dispute resolution, or other legitimate purposes.

We use reasonable technical and organizational measures designed to protect your information from unauthorized access, alteration, disclosure, or destruction.

These measures may include:

• Secure password hashing
• Signed authentication tokens
• HTTPS for data transmitted between your browser and Receiptify
• Parameterized database queries
• Access controls
• Measures designed to prevent unauthorized access
• Controls designed to prevent inconsistent credit balances and unauthorized usage

However, no internet-based service can guarantee absolute security.

Depending on your location and applicable privacy laws, you may have rights regarding your personal information.

These rights may include the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Request restriction of certain processing
• Object to certain processing
• Request a copy of your information where applicable

To exercise these rights, contact us at support@receiptify.app.

We may need to verify your identity before processing certain requests.

You can delete individual saved receipts from within Receiptify.

You can delete your entire account yourself from the Profile page, or request complete deletion by contacting support@receiptify.app.

When your account is deleted, we will delete or anonymize associated personal information unless we are required or permitted by law to retain certain information.

Information that has already been processed by third-party service providers may be subject to those providers' own retention and deletion policies.

Receiptify and the third-party services used to operate Receiptify may process information in countries other than the country in which you live.

Where required by applicable law, appropriate safeguards are used when personal information is transferred internationally.

Receiptify is intended for users who are 16 years of age or older.

We do not knowingly collect personal information from individuals under 16 through Receiptify.

If you believe that someone under 16 has created an account or provided personal information to us, please contact us at support@receiptify.app.

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Last updated” date at the top of this page.

Where required by applicable law, we may provide additional notice of material changes.

Your continued use of Receiptify after changes become effective means that you acknowledge the updated Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at support@receiptify.app.