Privacy policy

This policy explains what personal data the ReceiptQBO service at receiptqbo.com collects, why, and what you can do about it. The controller of the data is the administrator of the receiptqbo.com service, reachable at [email protected].

What we collect

• Account data: email address, password hash, role, the name of your practice, and sign-in times.
• Documents: receipts, bills and emails that you, your team or your clients upload or forward, and the data read from them (vendor, dates, amounts, tax, line items, card last four digits).
• QuickBooks Online data: when you connect a company, we read its chart of accounts, classes, locations, customers, vendors and recent expense transactions, and we create expenses, bills, vendors and attachments that you approve or that your rules approve. We store the connection tokens encrypted. We never receive your QuickBooks password.
• Client contact data that you enter so we can send missing receipt reminders on your behalf.
• Billing data: plan, invoices and payment status. Card numbers are handled by our payment processor and never reach our servers.
• Technical data: IP address, browser, and request logs used for security, fraud prevention and demo limits.

Why we use it

• To provide the service you subscribe to: reading, coding, matching and posting documents, reminders and exports (performance of a contract).
• To secure the service, prevent abuse and keep audit trails (legitimate interest, and the audit trail is part of the product).
• To bill you and meet tax and accounting obligations (legal obligation).
• To send service emails such as sign-in codes, password resets and invitations. We do not send marketing emails without consent.

We do not sell personal data and we do not use your documents or QuickBooks data to train AI models.

Who processes data for us

We use a small number of service providers under data processing terms: a hosting provider for servers and storage, a payment processor for subscriptions, an email delivery provider for service emails and forwarding addresses, and an AI model provider that reads documents and returns the extracted fields. Each receives only what it needs for its task. Intuit receives the entries you post to your own QuickBooks Online company.

How long we keep it

• Documents and extracted data stay in your account while your subscription is active, and you can delete them at any time. After cancellation they are deleted within 90 days unless you ask us to delete them sooner.
• Files uploaded to the public demo are deleted within 24 hours.
• QuickBooks tokens are deleted immediately when you disconnect a company.
• Invoices and billing records are kept as long as tax law requires.

Your rights

You can ask to access, correct, export or delete your personal data, and object to or restrict processing. California residents have the rights given by the CCPA and CPRA, including to know and to delete, and we do not sell or share personal information for cross-context advertising. Clients of a practice should contact the practice first, since the practice decides what is uploaded. Write to [email protected] and we answer within 30 days. You may also complain to your data protection authority.

Security

Data is encrypted in transit with TLS and at rest. Access inside a practice is limited by role, and every action on a document is logged. See the security page.

Cookies

We use only essential cookies. See the cookie policy.

Changes

When this policy changes in a way that matters, we tell account owners by email before the change applies.