Privacy Policy

Welcome to Receiptist! We are committed to protecting your privacy and handling your data in an open and transparent manner. This privacy policy explains what personal data we collect, how we use it, and what rights you have in relation to it.

1. Who We Are

Receiptist ("we," "us," "our") is a service that helps you track your expenses through our Telegram bot (the "Service"). As the provider of the Service, we act as the data controller for the personal information you provide.

2. What Data We Collect and Why

We only collect data that is essential for the Service to function.

• Telegram User Information: When you interact with our bot, we receive your public profile data from Telegram, including your Telegram User ID and the Chat ID. We use this to associate your stored receipts with your account and to communicate with you.
• Receipt Images: When you send a photo of a receipt, we temporarily store the image file in a secure Google Cloud Storage bucket for processing.
• Parsed Receipt Data: Our AI service extracts structured data from your receipts, such as merchant name, date, currency, total amount, and individual line items with their categories. This structured data is stored in our secure Google Cloud Firestore database to power the core features of the bot, like spending summaries.

3. Legal Basis for Processing Your Data

Under the General Data Protection Regulation (GDPR), we process your data on the following legal basis:

Performance of a Contract: Our main reason for processing your data is to provide you with the Service you have requested—namely, to parse your receipts and provide you with spending summaries. Your use of the bot constitutes an agreement for us to perform this service.

4. Data Retention: How Long We Keep Your Information

We believe in data minimization and do not store your data indefinitely.

5. Data Security

We take the security of your data very seriously. All data is stored within Google Cloud Platform (GCP), which provides robust, state-of-the-art security.

• Receipt images are stored in Google Cloud Storage.
• Structured expense data is stored in Google Cloud Firestore.
• All sensitive credentials, like API keys, are stored securely in Google's Secret Manager.
• Our functions run in the europe-west1 region, helping to keep data within the EU.

6. Your Data Protection Rights

Under GDPR, you have several rights regarding your personal data, which we are committed to upholding:

To exercise any of these rights, please contact us at support@receiptist.app. We will process these requests manually and respond in a timely manner.

7. Third-Party Services (Data Processors)

We use the following third-party services to provide our Service. These services act as "data processors" on our behalf:

8. Website Analytics and Cookies

Google Analytics

Our website (receiptist.app) uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC. Google Analytics helps us understand how visitors use our website so we can improve the user experience.

What data does Google Analytics collect?

• Usage Data: Pages visited, time spent on site, navigation paths, scroll depth
• Interaction Data: Button clicks (e.g., "Try it now on Telegram"), feature accordion expansions, language selections
• Technical Data: Browser type, device type, screen resolution, approximate location (country/city level), referral source
• Video Engagement: Video play events, watch duration, completion status

How is this data used?

• To understand which features interest users most
• To measure conversion rates (how many visitors click "Try it now")
• To improve website content and user experience
• To identify technical issues and optimize performance

Legal Basis: We process this website analytics data based on our legitimate interest in improving our website and understanding user behavior. The data collected is anonymized and aggregated—Google Analytics does not collect personally identifiable information.

Data Retention: Google Analytics data is retained for 14 months, after which it is automatically deleted.

Cookies: Google Analytics uses first-party cookies (e.g., _ga, _gid) to distinguish unique users and maintain session state. These cookies typically expire after 2 years (_ga) or 24 hours (_gid).

Opt-Out: You can opt out of Google Analytics tracking by:

• Installing the Google Analytics Opt-out Browser Add-on
• Enabling "Do Not Track" in your browser settings
• Using browser extensions that block analytics scripts
• Disabling cookies in your browser (note: this may affect website functionality)

Data Sharing: Google Analytics data is processed by Google as a data processor. Google may use this data in accordance with their terms of service. For more information, see Google's Privacy Policy and How Google uses data.

Important Note: Google Analytics tracking applies only to our website (receiptist.app). The Telegram bot itself does not use Google Analytics—bot interactions are processed only as described in Section 2 above.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes.