Privacy Policy

Effective date: March 30, 2026

Receipts Vault ("Receipts Vault," "we," "our," or "us") provides tools that help users collect, extract, organize, store, and search receipts and related expense records. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices available to you.

1. Scope

This Privacy Policy applies to your use of Receipts Vault, including our website, web application, connected mailbox integrations, manual upload features, receipt scanning features, and related support services.

2. Information We Collect

Depending on how you use Receipts Vault, we may collect the following categories of information:

• Account and profile information: your name, email address, login credentials, workspace information, subscription details, and preferences.
• Connected mailbox information: when you connect a Google or Microsoft mailbox, we may receive access tokens and permitted account information necessary to authenticate you and provide the service.
• Email and attachment data: if you authorize mailbox access, we may process emails, attachments, and embedded receipt content for the purpose of identifying, importing, extracting, and organizing receipts and expense documents.
• Uploaded content: files, images, PDFs, screenshots, scans, and other documents you upload to Receipts Vault.
• Extracted receipt data: merchant name, transaction date, totals, taxes, currency, payment-related fields visible on the receipt, category suggestions, line items where available, and related metadata.
• Device, usage, and log data: IP address, browser type, operating system, pages visited, feature usage, timestamps, diagnostics, crash information, and security logs.
• Support and communications: messages you send to us, support requests, feedback, and other correspondence.

3. How We Use Information

We use personal information to:

• create and manage your account and workspace;
• authenticate you and maintain secure access to the service;
• connect to authorized mailbox providers and retrieve receipt-related emails and attachments that you have permitted us to process;
• scan, extract, classify, organize, deduplicate, and store receipt and expense information;
• make receipt records searchable and available to you inside the product;
• provide customer support, respond to requests, and communicate about the service;
• monitor performance, fix bugs, detect abuse, prevent fraud, and improve reliability and security;
• comply with legal obligations and enforce our Terms of Service; and
• analyze service usage in aggregated or de-identified form to improve Receipts Vault.

4. Google and Microsoft Connected Account Data

If you connect a Google or Microsoft account, Receipts Vault will only request the permissions reasonably necessary to deliver the features you choose to use. We use data obtained through those integrations solely to provide and improve the user-facing functionality of Receipts Vault, such as locating receipts, importing receipt attachments, extracting receipt details, organizing records, and enabling search and retrieval within your account.

We do not sell Google or Microsoft user data. We do not use Google or Microsoft user data for advertising. We do not use the content of connected mailboxes to train generalized advertising profiles. We do not transfer Google or Microsoft user data to third parties except as needed to operate the service, comply with law, protect rights and security, or as otherwise described in this Privacy Policy.

Receipts Vault's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, where applicable.

5. Legal Bases for Processing

Where applicable law requires a legal basis, we process personal information on one or more of the following grounds: your consent, performance of a contract with you, our legitimate interests in operating and securing the service, and compliance with legal obligations.

6. Sharing of Information

We may share personal information only in the following circumstances:

• Service providers and subprocessors: hosting, storage, OCR, analytics, authentication, communications, and support providers that process information on our behalf under appropriate contractual and security obligations.
• At your direction: where you choose to connect third-party services or share receipt records.
• Legal and safety reasons: where required by law, regulation, legal process, or to protect the rights, safety, property, or security of Receipts Vault, our users, or others.
• Business transfers: in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and legal safeguards.

7. Data Retention

We retain personal information for as long as reasonably necessary to provide the service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and backup processes. Connected account tokens may be retained until revoked, expired, or deleted. Receipt records and uploaded documents remain in your account until you delete them or request deletion, subject to limited retention for backups, legal compliance, fraud prevention, and security.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

Depending on your location, you may have rights to access, correct, update, export, restrict, object to, or delete your personal information. You may also be able to withdraw consent where processing is based on consent. You can usually disconnect a connected mailbox through your account settings or through the relevant provider account permissions page. To exercise rights or request deletion, contact us at support@thereceiptsvault.com.

10. International Transfers

Your information may be processed or stored in countries other than the one in which you live. Where required, we take reasonable steps designed to ensure that personal information transferred internationally remains protected under applicable law.

11. Children's Privacy

Receipts Vault is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to investigate and address the issue.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version here and update the effective date above. If a change is materially adverse, we may provide additional notice where required by law.

13. Contact Us

If you have questions about this Privacy Policy or Receipts Vault's data practices, contact us at support@thereceiptsvault.com.