ReceiptPanda ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at receiptpanda.com and our application at app.receiptpanda.com.
1. Information We Collect
Information you provide directly
- Account information: name, email address, password
- Profile information: company name, job title, country
- Expense data: receipts, amounts, merchants, categories, notes
- Payment information: billing address and payment method (processed by Stripe — we do not store card details)
- Communications: support tickets, emails, feedback
Information collected automatically
- Usage data: pages visited, features used, clicks, time spent
- Device information: browser type, operating system, IP address
- Cookies and similar tracking technologies (see Section 6)
- Log data: error reports, performance data
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve our services
- Process transactions and send related information (receipts, invoices)
- Send transactional emails (account verification, password reset, expense approvals)
- Send product updates and marketing communications (you can opt out at any time)
- Respond to support requests and resolve disputes
- Detect, investigate, and prevent fraudulent or unauthorized activity
- Comply with legal obligations
3. How We Share Your Information
We do not sell your personal data. We may share your information with:
- Service providers: third-party vendors who help us operate our service (hosting, analytics, payment processing, email delivery). They are bound by confidentiality obligations.
- Integration partners: accounting platforms (QuickBooks, Xero, Zoho) when you explicitly connect them to your account.
- Team members: within your organization, based on the roles and permissions you configure.
- Legal requirements: if required by law, court order, or governmental authority.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with prior notice to you.
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records for tax compliance).
You can export all your data at any time from your account settings before deletion.
5. Data Security
We implement industry-standard security measures including:
- TLS encryption for all data in transit
- AES-256 encryption for data at rest
- Regular security audits and penetration testing
- Role-based access controls for internal staff
- Multi-factor authentication for internal systems
No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Cookies
We use cookies and similar technologies for the following purposes:
- Essential cookies: required for the service to function (authentication, session management)
- Analytics cookies: help us understand how users interact with our product (Google Analytics 4)
- Preference cookies: remember your settings and preferences
You can control cookies through your browser settings. Disabling essential cookies will affect service functionality.
7. Your Rights
Depending on your location, you may have the following rights:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate or incomplete data
- Deletion: request deletion of your personal data ("right to be forgotten")
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing of your data for direct marketing
- Restriction: request restriction of processing in certain circumstances
To exercise any of these rights, contact us at privacy@receiptpanda.com. We will respond within 30 days.
8. International Transfers
ReceiptPanda is operated from India. If you access our service from outside India, your information may be transferred to and processed in India or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.
9. Children's Privacy
ReceiptPanda is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us at privacy@receiptpanda.com.
10. Third-Party Links
Our service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a prominent notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: privacy@receiptpanda.com
- Support: support@receiptpanda.com