Privacy Policy

1. Data We Collect

We collect the following categories of data:

Account Information

• Name and email address (provided at signup via Clerk)
• Profile settings (default currency, report format, notification preferences)

Receipt Data

• Receipt images you upload or photograph through the app
• Images forwarded to your unique email address (snapmyreceipts.com)
• Extracted transaction data: vendor name, amount, date, category, and any other fields the AI identifies in the receipt

Usage and Technical Data

• Log data and error reports (via Sentry)
• Product usage analytics such as feature interactions and session data (via PostHog)
• Browser type, device type, and IP address
• Cookies and local storage (see Section 7)

Payment Information

We do not store credit card numbers or full payment details. Payment is processed by Stripe, which provides us only with a payment status and a billing reference. See Stripe's Privacy Policy for details on how they handle your payment data.

2. How We Use Your Data

We use your data to:

• Provide, maintain, and improve the Service
• Process receipt images using AI (OCR) to extract and store transaction data on your behalf
• Send automated expense summaries to email recipients you configure
• Generate expense reports you request
• Send transactional emails (delegate invitations, account notices)
• Detect and prevent fraud, abuse, and security incidents
• Respond to your support requests
• Comply with legal obligations

We do not sell your personal data. We do not use your receipt images or extracted data to train AI models, build advertising profiles, or share with third parties for their own commercial purposes.

3. Third-Party Services

We rely on the following third-party services to operate. Each processes some of your data as a sub-processor:

4. Email Forwarding

Each account is assigned a unique forwarding email address (e.g., you@snapmyreceipts.com). When you forward a digital receipt to this address:

• The email and any attached images are received by our server
• Attached images are stored in your account and processed by AI
• The original email is discarded after processing

Only forward receipts from email addresses you have registered as "approved senders" in your account settings. Emails from unregistered senders are silently discarded.

5. Data Retention

We retain your account data and receipts for as long as your account is active. If you cancel your subscription:

• Your data remains accessible for the remainder of your paid billing period
• After account deletion or 30 days of inactivity post-cancellation, we may permanently delete your data

You can request deletion of your account and all associated data at any time by contacting privacy@snapmyreceipts.com.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Ask us to correct inaccurate data.
• Deletion. Request that we delete your account and associated data.
• Export. Download your receipt data as a CSV or PDF report from within the app.
• Objection. Object to certain types of processing (e.g., analytics).
• Portability. Receive your data in a machine-readable format.

To exercise any of these rights, contact us at privacy@snapmyreceipts.com. We will respond within 30 days. California residents have additional rights under the CCPA; EU/UK residents have additional rights under the GDPR.

7. Cookies and Local Storage

We use cookies and browser local storage for:

• Authentication. Session tokens managed by Clerk to keep you logged in.
• Preferences. Locally cached user settings (currency, camera preferences) to reduce server round trips.
• Analytics. PostHog uses a first-party cookie to track anonymous product usage.

We do not use third-party advertising cookies. You can clear cookies and local storage at any time via your browser settings, though this will sign you out of the Service.

8. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.2+) for all data
• Encryption at rest for stored files via Supabase Storage
• Row-level security policies so your data is isolated from other users
• AES-256-GCM encryption for any API keys you store with us (BYOK feature)

No system is completely secure. If you believe your account has been compromised, contact support@snapmyreceipts.com immediately.

9. Children's Privacy

The Service is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child, please contact privacy@snapmyreceipts.com and we will promptly delete it.

10. International Data Transfers

SnapMyReceipts is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. We rely on standard contractual clauses and other appropriate mechanisms for international data transfers where required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the Service at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For privacy-related questions, data access requests, or deletion requests, contact us at:

privacy@snapmyreceipts.com

We aim to respond to all privacy inquiries within 30 days.