Privacy Policy

What we collect

When you sign up and use a household’s report, we collect:

• Account info: your email address (used to sign you in with a link, no password) and the household and member names you enter.
• A PIN, if you set one: for a shared device (a tablet on the counter, say), a person can use a 4-digit PIN instead of their own email login. It’s stored as a one-way hash — we can’t read it back out, and it never leaves the database in plain form.
• Receipts and the data read from them: the photos or screenshots you upload, and the vendor, date, amount, and category extracted from them.
• Mileage, if you turn it on: trip dates, from/to, purpose, and miles you enter.
• Settings and report history: your categories, per-mile rates, weekly reports, and (if you use the business tools) production reports, employee submissions, and approvals.
• Billing information, indirectly: our payment processor, Stripe, handles your card. We never see or store your full card number — we keep only what Stripe gives back to identify your subscription (a customer ID, a subscription ID, its status).

How a receipt gets read

When you photograph or upload a receipt, the image is sent to Anthropic’s Claude, an AI model, which reads off the vendor, date, amount, and category. That’s the only third party that ever sees the content of a receipt photo, and it’s used only to extract those fields for you — not to train a model on your data, and not for anything else. Every field it reads stays fully editable, so you’re never stuck with what it guessed.

Who else touches your data

We keep our vendor list short on purpose. Everyone on it exists to run the app itself, not to sell or share your data:

• Supabase — our database, file storage, and sign-in system. Your receipts, reports, and account records live here, access-controlled so a household can only ever see its own data.
• Vercel — hosts the app you’re using right now.
• Anthropic — reads receipt photos, as above.
• Stripe — handles payment and subscription billing.
• Resend — sends the emails the app sends you: sign-in codes, invites, review notifications, and a heads-up before your trial ends.
• Meta — ads measurement on our marketing pages, plus a signal when an account is created or a subscription starts, so we know whether our ads work. It never sees your receipts, reports, or anything you do inside the app.

We don’t sell your data. The only advertising tool we use is the Meta measurement above; the pages where your receipts and reports live carry no ad tracking.

Cookies

We use a small number of cookies to make the app work: one to keep you signed in, one that remembers which household member is active on a shared device, and one short-lived one that carries an invite link until you’ve signed in.

Two more exist to measure our own advertising, and only on our public pages (never inside the app): one that remembers which ad or campaign brought you here, which holds only the campaign tags from the link you clicked and is kept for 30 days, and the Meta measurement cookie described above. Neither reads your receipts or anything you do inside the app.

How long we keep it

We keep your data for as long as your household’s account is active, so your report history stays intact year over year. An admin can clear every receipt and trip in a household at any time from Settings. To delete a household’s account entirely — every record, permanently — email hello@receiptsorted.com from the account’s email address and we’ll take care of it, normally within a few days.

Your rights

You can ask us, any time, to see what we have on your household, correct it, or delete it. Email us and we’ll handle it directly — there’s no form to fill out.

Security

Data is encrypted in transit (HTTPS) between your device and our servers. Receipt photos are stored in a private location, not publicly accessible. PINs are hashed, never stored in plain text. No system is perfectly secure, but we treat your receipts — which can include names, partial card numbers, and other personal details printed on them — as sensitive, and design access around that.

Children

Receipt Sorted is for adults managing a household or small business. It isn’t directed at children, and we don’t knowingly collect data from anyone under 13.

Changes to this policy

If this policy changes in a way that matters, we’ll update the date at the top and, for a significant change, email the account holders on record.

Contact

RealtyRazor LLC · hello@receiptsorted.com