ReceiptWhere Privacy Policy
Effective October 15, 2026. This policy explains how DuoNex AI LLC ("DuoNex", "we") handles your information in ReceiptWhere. We do not sell your data and we do not use it for advertising.
1. What we collect
| Category | Examples |
|---|---|
| Account | Email address; the account identifier Google or Apple gives us if you sign in with them; time zone; home country; plan |
| Your documents | Photos, PDFs and forwarded emails you send us, including the email's sender, subject, body and attachments |
| Details read from documents | Merchant, total, currency, date, purchase or refund, payment method and the last four digits of a card when printed |
| Your confirmations | Corrections and confirmations you make in the app, with the date and time |
| Technical | Sign-in records (sign-in links and sessions, stored in hashed form), error logs, and per-document processing cost records |
We do not ask for, and you should not upload, full card numbers, passwords or government ID numbers. Card numbers printed on receipts are almost always masked by the merchant.
2. How we use it
- To provide ReceiptWhere: storing your documents, reading them automatically, showing and searching them, and letting you correct details.
- To sign you in and send you service emails, such as sign-in links. We do not send marketing email without your consent.
- To keep the service secure, prevent abuse, enforce plan limits and control costs.
- To improve the reading of documents, using our own test documents and measurements. We do not use your documents to build marketing profiles.
3. Who processes data for us
We use a small number of service providers, each only to run ReceiptWhere:
| Provider | Purpose | Location |
|---|---|---|
| Anthropic | Automated reading of document images | United States |
| Railway | Application hosting and database | United States |
| Cloudflare (R2) | Storage of your original files | North America |
| Mailgun | Sending sign-in emails; receiving documents you forward | United States |
| Google, Apple | Sign-in, if you choose them | As per their own policies |
Our AI provider processes documents under commercial terms that do not permit it to train its models on your content. We share information with others only if the law requires it, or with your instruction.
4. How long we keep it
- While your account is open, we keep your documents and details. On the Free plan, documents older than six months are archived, not deleted, and become visible again if you upgrade.
- When you delete your account, we remove your documents, details, confirmations and inbound address from our live systems immediately and from backups within 30 days. If another account uploaded an identical file, that copy stays with that account only. Cost records are kept without any link to you or your documents. We keep a one-way fingerprint of a deleted account and its inbound address, so that the address is never given to anyone else and the deletion is re-applied if a backup is ever restored.
- Technical logs are kept for a limited period for security and troubleshooting.
5. Security
Data is encrypted in transit. Files are stored in private storage that is not publicly accessible, and access to production systems is limited. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.
6. Your choices and rights
- Access and correction: view and correct your documents' details in the app.
- Export: download your records (PDF, CSV and UTEM files) on paid plans; on request, we provide a copy of your data on any plan.
- Deletion: delete documents or your whole account in the app.
- Depending on where you live (for example in the EU, the UK or California), you may have additional rights, such as objecting to processing or asking for a copy of your data in a portable format. Contact us to use them.
7. International users
ReceiptWhere is operated from the United States, and your data is stored in North America. If you use it from another country, your data is transferred there. Before we offer ReceiptWhere in the EU, we will put the required transfer safeguards in place and update this policy.
8. Children
ReceiptWhere is not intended for anyone under 18, and we do not knowingly collect their information.
9. Changes and contact
We will tell you about material changes in the app or by email before they take effect. Questions or requests: receipt@receiptwhere.com, DuoNex AI LLC, 2508 SW 144th Pl, Burien, WA 98166, USA.