This privacy policy explains how Receiptor AI collects, uses, and protects your information. We're a small team building software to automate bookkeeping, and we take your privacy seriously.
Receiptor AI is operated by Merlino, Inc., a Delaware corporation.
We provide our services worldwide with no geographic restrictions.
When you sign up, we collect:
We use Stripe to process payments. We do not store your full credit card details. Stripe handles all payment data in accordance with its security standards.
When you connect your email account, we:
We support Gmail, Outlook, and IMAP email providers. Access is granted through OAuth tokens, app-specific passwords, or account credentials, depending on your email provider.
We process and extract data from:
From these documents, we extract accounting-related information, including:
We do not extract or store full credit card numbers or bank account numbers.
If you use WhatsApp:
We integrate with Google Drive and Dropbox with limited permissions:
We integrate with QuickBooks Online and Xero. You can:
We use OAuth for these integrations and do not store your accounting software passwords.
We collect:
We use Google Analytics and PostHog for analytics, which may include session replays and usage logs to help us improve the product.
We use essential cookies for authentication and functionality. Our analytics tools (Google Analytics, PostHog) use cookies to track usage. You can control cookies through your browser settings. We respect Do Not Track browser signals.
We use your information to:
We do not use your data for marketing purposes or to train AI models.
We use a combination of third-party AI services (OpenAI, Azure, AWS) and our custom-trained models to process your documents.
Your data is never used to train or improve AI models—neither ours nor third-party models.
You can permanently delete your documents at any time without contacting support.
We use the following third-party services that may process your data:
These services act as subprocessors under GDPR terms. We rely on AWS's Data Processing Agreement for international data transfers.
We do not sell, rent, or trade your personal information to third parties.
We do not share your data with law enforcement or government agencies except when required by valid legal process (court order, subpoena, or other legal obligation). To date, we have never received such a request.
In the event of a merger, acquisition, or sale of assets, user data may be transferred to the new owner. We would notify you via email and provide options for data deletion if you prefer not to continue.
You can download your data at any time in the following formats:
You can:
When you delete your account, all data is removed immediately.
You can unsubscribe from product update emails using the link in any email or through your account settings. You will continue to receive essential transactional emails (such as extraction confirmations, error notifications, etc.).
For EU, UK, and California residents, you have the right to:
To exercise these rights, contact us at info@receiptor.ai.
GDPR Compliance: We comply with the General Data Protection Regulation for all EU and UK users.
CCPA Compliance: We comply with the California Consumer Privacy Act for California residents.
We store data in AWS Europe but serve customers worldwide. Data transfers are governed by AWS's Data Processing Agreement and standard security practices. Your data remains stored in EU regions regardless of your location.
In the unlikely event of a data breach:
Receiptor AI is intended for business use. We do not have age verification in place, but our service is not designed for or directed at children under 16. We do not knowingly collect information from children.
Only authorized team members (Romeo Bellon and Luigi Fernandez, the founders) have access to customer data, and only under these circumstances:
All data access is logged for security and accountability.
We will notify you of privacy policy changes via email through Customer.io. For material changes that affect how we use your data, we may require your acceptance before you continue using the service.
For privacy questions, data requests, or concerns:
For data access, correction, or deletion requests, simply email us at info@receiptor.ai with your request. We'll respond promptly.
This policy reflects our commitment to protecting your privacy while being transparent about our practices. We're a small team that values every customer, and we're here to answer any questions you have.