Privacy Policy

Welcome to Receiptist! We are committed to protecting your privacy and handling your data in an open and transparent manner. This privacy policy explains what personal data we collect, how we use it, and what rights you have in relation to it.

1. Who We Are

Receiptist ("we," "us," "our") is a service that helps you track your expenses through our Telegram bot (the "Service"). As the provider of the Service, we act as the data controller for the personal information you provide.

2. What Data We Collect and Why

We only collect data that is essential for the Service to function.

• Telegram User Information: When you interact with our bot, we receive your public profile data from Telegram, including your Telegram User ID and the Chat ID. We use this to associate your stored receipts with your account and to communicate with you.
• Receipt Images: When you send a photo of a receipt, we temporarily store the image file in a secure Google Cloud Storage bucket for processing.
• Parsed Receipt Data: Our AI service extracts structured data from your receipts, such as merchant name, date, currency, total amount, and individual line items with their categories. This structured data is stored in our secure Google Cloud Firestore database to power the core features of the bot, like spending summaries.

3. Legal Basis for Processing Your Data

Under the General Data Protection Regulation (GDPR), we process your data on the following legal basis:

Performance of a Contract: Our main reason for processing your data is to provide you with the Service you have requested—namely, to parse your receipts and provide you with spending summaries. Your use of the bot constitutes an agreement for us to perform this service.

4. Data Retention: How Long We Keep Your Information

We believe in data minimization and do not store your data indefinitely.

• Receipt Images: Original receipt images are automatically deleted from our storage bucket after 365 days.
• Parsed Receipt Data: Structured receipt data associated with your account will be retained for as long as your account is active to provide you with historical spending analysis. If your account shows no activity for a period of one year, we will anonymize or delete this data.

5. Data Security

We take the security of your data very seriously. All data is stored within Google Cloud Platform (GCP), which provides robust, state-of-the-art security.

• Receipt images are stored in Google Cloud Storage.
• Structured expense data is stored in Google Cloud Firestore.
• All sensitive credentials, like API keys, are stored securely in Google's Secret Manager.
• Our functions run in the europe-west1 region, helping to keep data within the EU.

6. Your Data Protection Rights

Under GDPR, you have several rights regarding your personal data, which we are committed to upholding:

• The Right to Access: You have the right to request a copy of the personal data we hold about you.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate.
• The Right to Erasure (The "Right to be Forgotten"): You have the right to request that we erase your personal data under certain conditions.

To exercise any of these rights, please contact us at support@receiptist.app. We will process these requests manually and respond in a timely manner.

7. Third-Party Services (Data Processors)

We use the following third-party services to provide our Service. These services act as "data processors" on our behalf:

• Telegram: As the platform for the bot, Telegram processes your messages.
• Google Cloud Platform (GCP): We use various GCP services (Cloud Functions, Storage, Firestore, Vertex AI) to power the bot's backend and AI processing.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes.