Receiptora Privacy Policy

Effective date: 2026-10-01

This Privacy Policy describes the personal information Receiptora collects and how Patten Labs ("Patten Labs", "we", "us" or "our") uses it. Receiptora is a commercial receipt app used by people in Canada, including Ontario. Patten Labs operates Receiptora.

Contact: info@patten-labs.com

1. Information we collect

Account. When you register we collect your first name, last name, email address, and password. Passwords are handled by the Base44 authentication service used by the app. If you sign in with Google, we receive the name, email address, and profile picture Google provides. You can also set a display name and upload a profile picture.

We also store your plan (free or pro), Stripe customer and subscription identifiers, subscription status, how many AI extractions you have used in the current period, a personal inbound-email code if you use email forwarding, family-sharing fields (family group, invited email addresses, and access levels), custom subscription categories, tax region and tax rate if you save them, and a deleted flag if you delete your account.

Receipts and uploads. Images, PDFs, HTML files, and other documents you upload, scan, or attach, and the fields stored with each transaction, such as date, merchant, amounts, tax, payment method, category, notes, tags, and file links.

Bank imports. Rows imported from bank statement files you upload, including an account label, date, description, amount, balance, and the original file name.

Other records you create. Bills, budgets, subscriptions, companies or workspaces, vendors, category rules, and export logs (format, receipt count, totals, tax region, and time of export).

Email forwarding. If you use a personal receiving address, inbound messages arrive through Resend. We may receive sender and recipient addresses, subject, body, links, and attachments so the app can create a receipt.

Corrections. When you correct an AI-extracted field, we store the original value, your correction, and an optional note. Those corrections may be used to guide later extractions on your own account.

Legal acceptance. When you accept the Terms of Service or this Privacy Policy we store the document type, version number, time of acceptance, method (sign-up checkbox or in-app prompt), your account id, your email, IP address, and browser user-agent.

On your device. The app stores an authentication token and interface preferences (navigation layout, collapsed settings sections, ledger filters, and the active company) in your browser's local storage. During sign-up it may briefly store a pending legal-acceptance note so Google sign-in can finish recording your agreement.

Error logs. If an AI job fails, the app may store an error record for administrators, including the job type, stage, message, and the receipt file URL.

2. Why we use this information

We use this information to run your account, store and classify your records, extract information from documents, send bill-reminder emails you set up, process paid-plan billing, enable family sharing you choose, record that you accepted these documents, and fix problems with the service.

3. Who we share it with

We share information with the services this app actually uses:

• Base44 — hosts the application, database, file storage, and authentication. Sign-up one-time passcodes, family invites, bill-reminder emails, and AI extraction calls go through Base44 integrations.
• Stripe — processes paid-plan payments. We send your email and identifiers needed to create a customer and subscription. Stripe collects card details. We store Stripe customer and subscription identifiers and plan status, not your full card number.
• Resend — receives forwarded receipt emails on your personal inbound address.
• Google — optional sign-in. The site also loads fonts from Google Fonts.
• Base44's AI integration — receives receipt files or text so the app can extract fields. This repository does not name a specific AI model vendor. This app does not say whether the extraction provider keeps receipt contents or uses them to train a model.

People you invite to a shared workspace can see records in that workspace according to the access level you set.

We do not claim that processing stays in Canada.

The Base44 Vite plugin used to build the app has its analytics tracker turned on. This repository does not include a separate advertising, analytics, or sale-of-data integration, and it does not describe what that Base44 tracker collects.

4. How long we keep it

While your account is active, we keep the records in it.

Items you move to Trash are permanently deleted about twelve months later by a scheduled job, or sooner if you empty them.

If you delete your account from Settings, the app cancels Stripe billing, removes you from family groups, and deletes your owned records (transactions, bank rows, subscriptions, bills, budgets, category rules, vendors, extraction feedback, export logs, AI error logs, and companies). It then clears your display name, profile picture, inbound-email code, and custom categories, and marks the user record as deleted.

Uploaded receipt files are not deleted by that process. The file-storage API the app uses does not expose a delete call, so files may remain in storage after the records that pointed to them are gone.

Legal-acceptance records are not deleted with the account.

If you want us to look into remaining data, email info@patten-labs.com.

5. Access and correction

Email info@patten-labs.com to access or correct your account information.

6. Contact

Patten Labs
Email: info@patten-labs.com