Privacy Policy

Last updated: April 12, 2026

ReceiptSheet ("we", "us", "our") provides a receipt-to-spreadsheet service. This policy explains what data we handle, how, and your rights.

1. What we process

When you upload a receipt photo, our service:

1. Sends the image to Anthropic's Claude Vision API for data extraction.
2. Sends the extracted data (merchant, date, amount, items) to your Google Sheet via the Google Sheets API.
3. Deletes the image from memory when the request completes.

We do not store your receipt images or extracted data. Our server is a Cloudflare Worker — a stateless compute environment with no disk, no filesystem, and no persistent storage. Your receipt image exists in server memory for the few seconds it takes to process, then is automatically garbage-collected. This is architecturally enforced, not just a policy choice.

2. What we store

We store the minimum data needed to operate the service:

• Account identifier: A hashed version of your Google account ID. We do not store your email address or name.
• Usage count: How many receipts you've processed this month (a number, not the receipt data).
• Subscription status: Whether you're on the free or paid plan.
• Google Sheet ID: Which Sheet we should write to.
• Google OAuth token: Encrypted, stored in Cloudflare KV, auto-expires after 30 days of inactivity.

That's it. No receipt data, no images, no financial information.

3. Sub-processors

Your data passes through these services during processing:

4. What we do NOT do

• We do not store receipt images anywhere, ever.
• We do not log extracted receipt data.
• We do not sell, share, or use your data for advertising, analytics, or machine learning training.
• We do not use tracking cookies, analytics pixels, or fingerprinting. The only cookie is your Google login session.
• We do not email you marketing material unless you explicitly opt in.

5. Your rights

Under GDPR, CCPA, and similar regulations, you have the right to:

• Access: Request what data we hold about you. Answer: a hashed ID, a number (usage count), and a subscription status.
• Deletion: Request deletion of all your data. We will delete your D1 record and KV-stored OAuth token within 48 hours. Since we don't store receipt data, there is nothing else to delete.
• Portability: Your extracted data is already in your Google Sheet — you own it.
• Objection: You can revoke Google OAuth access at any time via your Google account permissions page.

To exercise any right, email: povkonop@gmail.com (or the contact listed on the main page).

6. Data retention

• Receipt images: Not retained. Deleted from memory after processing (~5 seconds).
• Account data: Retained while your account is active. Auto-deleted after 12 months of inactivity.
• OAuth tokens: Auto-expire after 30 days of inactivity.
• Payment data: Held by Stripe under their retention policy. We do not hold any payment data.

7. Security

All data in transit is encrypted via TLS. Data at rest in D1 and KV is encrypted by Cloudflare. OAuth tokens are additionally encrypted before storage. We follow OWASP guidelines for the web application.

8. Children

This service is not directed at children under 16. We do not knowingly process data from children.

9. Changes

If we change this policy in a way that affects your rights, we will notify you via the email associated with your Google account (if available) or via a banner on the site, at least 30 days before the change takes effect.

10. Contact

For privacy questions: povkonop@gmail.com