Privacy Policy

We don’t track you.

That’s our Privacy Policy in a nutshell.

This policy covers receiptbay.com, our dashboard, our mobile apps, and related APIs (the “Services”). ReceiptBay is a U.S. product. We are not a bank, broker, or money transmitter, and we do not hold deposits.

We don’t track you. Period.

We don’t use advertising cookies, analytics pixels, fingerprinting, or session replay. We don’t build a profile of you to follow you around with ads. We have never sold personal information, and we don’t share it for cross-context behavioral advertising.

This marketing website does not set cookies. Fonts and assets are served from our own origin. We count anonymous pageviews (no profile of you). If you start a conversation from the site, we get the messages you send — see the Cookie Notice.

Your receipts stay yours

To keep a receipt inbox you create an account. That’s like turning on a feature that needs an email address to function — we ask for what the feature needs, and we use it for that purpose.

If you create an account, we collect:

• Account data — email and authentication identifiers (Firebase Auth).
• Receipts you add — images or files, plus the merchant, date, totals, taxes, tenders, and line items we extract from them.
• Connections you choose — if you link a retailer, a bank (for example Plaid), or an accounting tool, the tokens and data that connection returns, used only to provide that connection.

We use this to run your inbox, extract text, match items, show you your own history, keep the service up, and stop abuse. We don’t use your receipts to advertise to you on other companies’ sites.

Community prices are anonymous

After extraction we may keep de-identified item, price, merchant, and coarse region signals — the same idea as anonymous search trends. We might know that 2% milk sold for $3.49 at grocery stores in this region this week. We don’t know that it was you, and we don’t store your name, email, or account id next to that observation.

That anonymous dataset can improve price context for other users and for business customers. It is not a profile of you. We engineer it so it cannot be tied back to your account.

Who else can see data, and who can’t

Processors that run the product on our instructions: Google Cloud and Firebase (hosting, auth, database, object storage, OCR), Microsoft Azure (backup OCR), and Plaid (only if you connect a bank). On this marketing site: anonymous pageview counts and, only if you open chat, a live-chat provider. They get what they need to do that job — not a license to advertise with your receipts. A current processor list is available on request at support@receiptbay.com.

If you authorize an export (for example to accounting software), we send what that connection requires, at your direction. We may disclose information if legally forced to, to enforce our Terms, or in a merger or sale of the company — and we will use legal means to resist overbroad requests for personal information.

Other websites you navigate to (app stores, partner sites) have their own policies.

What your device sends automatically

Browsers and apps send an IP address, user agent, and similar request metadata so the internet can route a page to you. We use that transiently to deliver the Services and to block abuse. We don’t save it alongside your receipts or community prices in a way that builds a browsing or purchase history of you. Security logs are kept briefly (typically 30–90 days) and then roll off.

Retention and deletion

Account and receipt images: for as long as the account is open. After a verified deletion request we delete or de-identify personal receipts we still hold within 90 days, except where the law requires a record. Aggregated community prices that no longer identify you may remain — they were never stored as you.

Your rights (United States)

Email support@receiptbay.com from the address on the account. We will verify you, then:

• Give you a copy of the personal information we hold (access / portability).
• Correct inaccurate account data.
• Delete your account and the personal receipts we still hold.

California (CCPA/CPRA): you also have the right to know, delete, correct, and to opt out of sale or sharing. We do not sell personal information and we do not share it for advertising. You may use an authorized agent. We will not discriminate against you for exercising these rights. Subject line “Do Not Sell or Share” gets you a confirmation, not a new tracking control — there isn’t one to turn off.

We do not offer the Services to the EEA or UK as a target market. Data is processed in the United States (Google Cloud, currently us-east1).

Security

TLS in transit, encryption at rest on Google Cloud, and access limited to people and services that need it. No method of transmission or storage is 100% secure. We don’t claim PCI DSS, SOC 2, or similar certifications in this policy.

Children

The Services are not directed to anyone under 18. We do not knowingly collect personal information from children. If you think we have, write to support@receiptbay.com and we will delete it.

Changes

We will post updates here and change the “Last updated” date. If we materially change how we use personal information, we will say so in-product or by email to the account address.

Contact

Questions about this policy: support@receiptbay.com.