1. Overview
This Privacy Policy explains how [OPERATOR LEGAL NAME] (“we,” “us,” or “our”) collects, uses, shares, and protects information when you use mreceipt and related websites, messaging, and receipt-processing services (the “Service”).
2. Information we collect
Information you provide
- contact and account information, such as your phone number, email address, and user identifier;
- receipt images, messages, notes, and expense-sharing choices;
- purchase details extracted from receipts, such as merchant, date, location, line items, totals, tax, tips, categories, and payment-card brand or last four digits when present; and
- communications you send to us for support or feedback.
Information collected automatically
We may collect device, browser, IP address, message-delivery, log, and usage information needed to operate, secure, diagnose, and understand the Service. Describe any cookies or analytics used at launch here: [COOKIE/ANALYTICS DETAILS].
3. How we use information
We may use information to:
- receive, store, extract, summarize, categorize, and display receipt information;
- associate expenses with the people or groups you select;
- operate messaging, registration, support, security, and account functions;
- detect abuse, troubleshoot problems, and maintain service reliability;
- understand and improve features, including the accuracy of automated processing; and
- comply with law and enforce our Terms.
State whether user receipt content will be used to train or improve machine-learning models: [MODEL-IMPROVEMENT POLICY].
4. Automated processing
We may use optical character recognition and artificial-intelligence services to extract and categorize receipt information. These systems can make mistakes. The Service should provide a way to review or correct important information before relying on it.
5. How we share information
We may share information:
- with people or shared groups you intentionally connect to the expense;
- with vendors that provide infrastructure, cloud storage, messaging, receipt extraction, AI processing, analytics, security, and support;
- when required by law or reasonably necessary to protect rights, safety, users, or the Service; and
- as part of a merger, financing, acquisition, bankruptcy, or sale of assets, subject to appropriate protections.
List launch vendors and links to their privacy terms here: [SERVICE PROVIDER LIST—E.G., AWS, TWILIO].
We do not sell personal information for money. Update this statement if the final data practices require a different disclosure.
6. Retention and deletion
We retain information only for as long as reasonably necessary for the purposes described in this policy, including providing the Service, meeting legal obligations, resolving disputes, and maintaining security. Insert the actual retention periods for receipt images, extracted data, account information, and system logs here: [RETENTION SCHEDULE]. Deletion requests may be sent to [PRIVACY EMAIL].
7. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. Do not submit full payment-card numbers, bank credentials, government identifiers, or other information not needed to organize a receipt.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. You may also withdraw consent where processing relies on consent. We may need to verify your identity before completing a request. Contact [PRIVACY EMAIL] to make a request.
9. Children’s privacy
The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and take appropriate action. Adjust this age threshold if the final service or applicable law requires it.
10. Location and transfers
Information may be processed in the United States and other places where we or our providers operate. If the Service is offered outside the United States, add the required international-transfer mechanism and regional disclosures here: [INTERNATIONAL TRANSFER TERMS].
11. Updates and contact
We may update this policy and will post the revised version with a new effective date. For privacy questions or requests, contact [OPERATOR LEGAL NAME] at [PRIVACY EMAIL] or [MAILING ADDRESS].