Privacy Policy

Receipt Converter ("we", "us", "our") operates the website at receiptconverter.com. We are an AI-powered tool that converts receipt images and PDFs into structured spreadsheet data. If you have questions about this policy, contact us at hello@receiptconverter.com.

Account information: When you sign up, we collect your email address and a hashed password (or, if you use Google/Microsoft sign-in, your name and email from that provider). We do not store your OAuth passwords.

Uploaded files: When you upload a receipt image or PDF, that file is temporarily processed on our servers. If you have invoice storage enabled, the original file is stored in our cloud storage (Supabase Storage) linked to your account. If storage is disabled, the file is discarded after conversion.

Converted data: The structured data extracted from your receipt (merchant name, line items, totals, dates, taxes) may be stored in our database if invoice storage is enabled on your account.

Usage data: We track the number of conversions you perform each month to enforce plan limits. This is stored as an anonymized counter per user or IP address.

Contact form submissions: If you contact us through our website, we store your name, email address, and message so we can respond to you.

Technical data: Standard web server logs including IP addresses, browser type, and page visit timestamps. These are used for security, performance monitoring, and rate limiting.

• To provide, operate, and improve the Service
• To process your uploaded receipts using AI models
• To enforce usage limits and plan entitlements
• To send transactional emails (e.g., account confirmation, password reset)
• To respond to support requests and contact form submissions
• To detect and prevent abuse, fraud, and security incidents

We do not use your receipt data to train AI models, and we do not sell, rent, or share your personal data with third parties for marketing purposes.

We use the following third-party services to operate Receipt Converter. Each has its own privacy policy:

• OpenAI — Your uploaded receipt images and text are sent to OpenAI's API for data extraction. OpenAI's data usage policies apply. See openai.com/policies/privacy-policy.
• Supabase — We use Supabase for authentication, database storage, and file storage. Data is stored in Supabase's infrastructure. See supabase.com/privacy.
• Vercel — Our application is hosted on Vercel. Standard server access logs are retained per Vercel's policy. See vercel.com/legal/privacy-policy.
• Google / Microsoft — If you sign in using Google or Microsoft OAuth, your authentication is handled by those providers. We only receive your email and name from them.

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Uploaded receipt files are retained in storage only if you have invoice storage enabled, and only for as long as you keep them in your dashboard.
• Converted invoice data is retained until you delete it from your dashboard or delete your account.
• Usage counters are reset at the start of each calendar month.
• Contact form messages are retained for up to 12 months for support purposes.

You can delete individual invoices from your dashboard at any time. To delete your account and all associated data, contact us at hello@receiptconverter.com.

We use session cookies set by Supabase to keep you logged in. We do not use advertising trackers, third-party analytics cookies, or behavioral profiling tools.

We may use basic, privacy-respecting analytics to understand aggregate usage patterns (e.g., which pages are visited most). No individual user data is shared in this context.

Depending on where you live, you may have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you
• Correction — Ask us to correct inaccurate data
• Deletion — Request deletion of your account and associated data
• Portability — Request an export of your stored invoice data
• Objection — Object to processing of your data in certain circumstances

To exercise any of these rights, email us at hello@receiptconverter.com. We will respond within 30 days.

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), row-level security on our database, and limited access to production systems.

No system is completely secure. If you believe your account has been compromised, please contact us immediately.

Receipt Converter is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top. Material changes will be communicated to registered users via email where reasonably practicable.

Continued use of the Service after changes are posted constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests related to this Privacy Policy, please contact us at hello@receiptconverter.com or through the contact form on our website.