Privacy Policy

Last updated: January 18, 2026

ReceiptStudio ("we," "our," or "us") operates the receipt and invoice management service at getreceiptstudio.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Account Information

When you create an account, we collect your email address for authentication purposes. We use passwordless authentication via magic links sent to your email.

Documents and Financial Data

When you upload receipts and invoices, we collect:

  • Images and PDFs of your documents
  • Extracted data including merchant names, dates, amounts, and tax information
  • Categories and tags you assign to documents
  • Mileage entries and related travel information
  • Bank transaction data you import via CSV files
  • Notes and annotations you add

Usage Information

We automatically collect information about your use of the service, including pages processed, features used, and audit logs of your activities within your workspace.

How We Use Your Information

We use your information to:

  • Provide and maintain the service
  • Process your documents using OCR technology
  • Generate monthly expense packs and reports
  • Enable sharing with accountants and team members
  • Send transactional emails (login links, share notifications)
  • Improve and optimize our service
  • Comply with legal obligations

Third-Party Services

We use the following third-party services to operate ReceiptStudio:

  • Amazon Web Services (AWS) — Cloud infrastructure, document storage, and OCR processing via Amazon Textract
  • Stripe — Payment processing (when applicable)

These services have their own privacy policies governing their use of your data.

Data Retention

We retain your data for as long as your account is active. When you delete your workspace, we soft-delete your data and remove it from active systems. Document images and associated files are deleted from storage within 30 days of workspace deletion.

Data Sharing

We share your information only in these cases:

  • With your consent — When you share packs with accountants or invite team members
  • Service providers — With third parties who help us operate the service (AWS, Stripe)
  • Legal requirements — When required by law or to protect our rights

We do not sell your personal information.

Your Rights

You have the right to:

  • Access your data through the service interface
  • Export your data via monthly packs (CSV and PDF formats)
  • Correct inaccurate information in your documents
  • Delete your account and associated data
  • Opt out of non-essential communications

Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for stored documents
  • Access controls and audit logging
  • Regular security reviews

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at legal@getreceiptstudio.com.