Privacy & data

• Account details. Your email, name and company, and a password if you set one (stored only as a secure hash by our authentication provider). Used to sign you in (password or one-time sign-in link) and for product communications.
• Receipts you forward or upload. The photo or PDF, or the full forwarded email (kept unaltered as the original evidence), plus the structured fields we extract or you provide (merchant, amount, VAT, line items, date, category, notes, the last four digits of a payment card).
• Bank statement lines, if your accounting firm imports them. Date, amount, currency and the bank's text of each payment out on the account statement your firm uploads (incoming payments are not kept), with who imported them and your firm's decisions on them (a receipt linked by hand, “no receipt needed”, when you were asked for a receipt). Used only to find payments that have no receipt yet.
• Reminders your accounting firm sends you. When each reminder was sent and how many items it listed (not the items themselves), so you and your firm can see what was asked.
• Subscription status. Whether you're trialing, active, or canceled — synced from Stripe.
• Standard request metadata. IP, user agent, and timestamps captured by our hosting provider for security and abuse prevention.

• To deliver the service — we can't build a dashboard of your receipts without storing your receipts. Legal basis: contract performance.
• To read your receipts automatically — the receipt image or email text is sent to Anthropic's Claude model, which returns the structured fields. Anthropic processes it on our behalf and does not use it to train its models. Legal basis: contract performance.
• To work with your accounting firm, if you connect one — your firm sees your receipts, can import your bank statement to find payments without a receipt, and can have us email you a list of what is missing, by hand or on Mondays. Legal basis: contract performance (you asked us to share with your firm) and, for the Monday reminders, the legitimate interest of your company and its accountant in complete bookkeeping. You can object at any time by turning the weekly reminder off in Settings → Your accountant; stopping the sharing ends all of it.
• To bill you — Stripe handles the actual cardholder data; we only see the subscription state. Legal basis: contract performance.
• To prevent abuse and meet our security obligations — minimal request logs. Legal basis: legitimate interest.

We use a small set of third parties under data processing agreements. They process your data only as needed to run UnReceipt and never for their own purposes.

• Supabase — database, authentication, file storage. Hosted in the EU.
• Stripe — subscription billing, payment processing, automatic VAT calculation.
• Vercel — application hosting, request routing, CDN.
• Resend — sending our emails (welcome emails, sign-in links, and the reminders your accounting firm sends you: payments without a receipt and receipts to complete) and receiving the receipts you forward to your UnReceipt address.
• Anthropic — the Claude AI model that reads receipt images and emails to extract their fields.
• Sentry — error monitoring, EU region. Error reports are stripped of request contents, cookies and personal details before they are sent.

Some of these providers are US companies (Anthropic, Resend, Stripe, Vercel). Where personal data is transferred outside the EU/EEA, the transfer relies on the EU–US Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses.

• Open accounts: while your account is open — with a subscription or in the free pilot — we keep your receipts and their original files.
• After a subscription ends: your account and receipts stay available for 90 days so you can download them (Settings → Export for your accountant). If receipts keep arriving, the 90 days count from the last one. We email you about 14 days before anything is deleted; after that your account, receipts and files are permanently deleted. Copies in our providers' backups disappear when those backups expire. Billing records that we must keep for our own accounts (invoices, via Stripe) are kept as the law requires.
• Bank statement lines and the reminder log: while your company is linked to the accounting firm that imported them or sent the reminders. They are deleted when either of you ends the link, when the firm closes its account, when the firm removes them, and with your account.
• Your bookkeeping obligation: under Swedish bookkeeping law (bokföringslagen), a business must keep its receipts until the end of the seventh year after the financial year they belong to. That obligation stays with your company, so download your receipts before you close your account.
• Delete your account at any time in the app under Settings → Delete account. It takes effect immediately: your receipts, their original files and your account are deleted, and any subscription is cancelled. You can also email support@unreceipt.com from your account email and we'll do it for you within 30 days.

Under GDPR you have the right to access, correct, export, restrict, object to processing of, or delete your personal data. To exercise any of these, email support@unreceipt.com from your account email. We respond within 30 days.

You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe we're mishandling your data.

We set a small number of strictly-necessary cookies to keep you signed in and to remember a couple of UI preferences. We do not use advertising or cross-site tracking cookies. Anonymous, aggregated traffic measurement is provided by Vercel Web Analytics and Speed Insights.

We'll update this page when our practices change, and email account holders for material changes. The version date at the top tells you when it was last revised.

support@unreceipt.com for anything about your data, this policy, or to raise a concern.