Home / Privacy Policy
Privacy Policy
This policy explains what Receipt Pair collects, why, where it lives, and the control you have over it. Receipt Pair is operated from Denmark and processes data under the EU General Data Protection Regulation (GDPR).
1. Data controller
The account owner (you or your company) is the data controller for the business data processed through the service: transactions, receipts, and connected-account contents. Receipt Pair acts as data processor for that data, and as controller for account and billing records we keep about you (email, plan, invoices).
2. What we collect
- Account data: email address, name, password hash, MFA settings, plan and billing identifiers.
- Business data: bank transactions, receipt and invoice documents, extracted fields (merchant, amount, currency, VAT treatment), accounting delivery status, and the connections you configure.
- Credentials: OAuth tokens and API keys for the services you connect, stored encrypted with AES-256-GCM.
- Operational data: processing logs, security and audit events, rate-limit counters, and support correspondence.
- Usage data: product analytics events used to improve the service. We do not run third-party advertising trackers.
Raw email message content is not retained: the pipeline keeps receipt attachments and the extracted fields, not your inbox.
3. Why we process it
- Providing the service: matching charges to receipts, extraction, delivery to your accounting system, reports (contract necessity, Art. 6(1)(b)).
- Security and abuse prevention: authentication, rate limiting, audit trails (legitimate interest, Art. 6(1)(f)).
- Billing and legal obligations: invoices, tax records (legal obligation, Art. 6(1)(c)).
- Product improvement: aggregated, non-content usage signals (legitimate interest, Art. 6(1)(f)).
We do not sell your data and we do not use your documents to train models.
4. Where data is stored and processed
Primary infrastructure is Cloudflare's EU jurisdiction: the D1 database and R2 object storage run in EU locations; extraction and OCR run on Cloudflare's network under the same account boundary. Subprocessors we rely on:
- Cloudflare: hosting, database, storage, AI extraction (EU).
- Resend: transactional email such as security notices (EU region).
- Stripe: payment processing. Stripe receives billing data only; card details never touch our systems.
- Connected providers: Google, Microsoft, Wise, Enable Banking (PSD2 open banking), and your accounting system, each only within the access you grant.
Where a subprocessor transfers data outside the EU/EEA, it does so under an approved mechanism (e.g., standard contractual clauses).
5. Retention
- Business data is kept while your workspace exists and is removed when you delete it, including the storage prefix holding receipt files.
- Operational and security logs are retained for a bounded period and then deleted.
- Billing records are retained as required by Danish bookkeeping law (currently 5 years).
6. Your rights
Under GDPR you can:
- Access: export transactions and reports directly; a full data export is available on request.
- Rectify: correct transactions and account details in the app.
- Erase: delete your workspace from Settings; this cascades through every table and the storage prefix.
- Restrict or object: disconnect integrations at any time; disconnecting stops further processing of that source.
- Portability: CSV, SAF-T XML, and PDF exports cover the main records.
- Complain: to us first (support@receiptpair.com), or to the Danish Data Protection Agency (Datatilsynet).
7. Security
Credentials are encrypted at rest, data is tenant-isolated at the row and storage-prefix level, email and bank access are read-only, optional TOTP two-factor authentication is available, and all data access is logged. The security page describes the architecture.
8. Cookies
The app uses a session token in browser storage: no advertising or tracking cookies. The marketing site sets no cookies.
9. Changes
Material changes to this policy are announced by email to account owners before they take effect. The current version is always at receiptpair.com/privacy.
10. Contact
Data protection questions, access and deletion requests: support@receiptpair.com.