Privacy Policy

Receipt Inc., doing business as Receipt ("Receipt," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Receipt platform, APIs, website, and related services (collectively, the "Services").

By using our Services, you consent to the practices described in this Privacy Policy. This policy should be read alongside our Terms of Service.

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, company name, and other details you provide when creating an account.
• Payment information: Billing address and payment method details, processed through our third-party payment processor (we do not store full payment card numbers).
• Communications: Information you provide when contacting support, submitting feedback, or corresponding with us.
• API seller information: If you are an API seller, details about your API, company, and integration configuration.

1.2 Information Collected Automatically

• API call metadata: Request timestamps, endpoints called, response status codes, latency, and usage volume (we do not log request or response bodies unless required for debugging with your consent).
• Usage data: Features used, pages visited, interactions with the dashboard and documentation.
• Device and browser information: IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies: See Section 10 below for details.

1.3 Information from Third Parties

• Authentication providers: If you sign in via a third-party provider (such as Google or GitHub), we receive your name, email, and profile information as authorized by you.
• Analytics providers: We may receive aggregated analytics data from third-party services we use.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Process transactions and manage your wallet balance
• Route API requests to the appropriate third-party sellers
• Generate receipts, usage logs, and trust signals
• Monitor platform performance, security, and reliability
• Send transactional communications (billing confirmations, security alerts, service updates)
• Provide customer support
• Analyze usage patterns to improve the platform
• Detect, prevent, and address fraud, abuse, and technical issues
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Third-Party API Sellers

When you make API calls through Receipt, your request data is transmitted to the applicable third-party API seller to fulfill your request. Each seller has its own privacy practices and terms, and we encourage you to review them. We transmit only the data necessary to complete your API request.

3.2 Service Providers

We use third-party service providers for payment processing, hosting, analytics, and other operational functions. These providers are contractually obligated to protect your information and may only use it to provide services to us.

3.3 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

3.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. We also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

API call metadata and receipts are retained for operational, audit, and trust-graph purposes. Aggregated, anonymized usage data may be retained indefinitely.

5. Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to certain exceptions
• Data portability: Request your data in a structured, machine-readable format
• Opt-out: Opt out of marketing communications at any time
• Restriction: Request that we restrict processing of your personal information in certain circumstances

To exercise any of these rights, contact us at hello@receiptprotocol.com. We will respond within 30 days (or as required by applicable law).

7. Canadian Privacy Rights (PIPEDA)

If you are located in Canada, your personal information is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Withdraw consent to our processing, subject to legal or contractual restrictions
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, contact us at hello@receiptprotocol.com.

8. California Privacy Rights (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your CCPA rights. To exercise these rights, contact us at hello@receiptprotocol.com.

9. International Data Transfers

Our Services are operated from Canada. Your information may be transferred to, stored, and processed in Canada, the United States, or other countries where we or our service providers operate. By using the Services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Essential cookies: Required for the Services to function (authentication, security, preferences).
• Analytics cookies: Help us understand how the Services are used so we can improve them.

Most browsers allow you to control cookies through their settings. Disabling essential cookies may affect the functionality of the Services.

11. Children's Privacy

The Services are not directed to individuals under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at hello@receiptprotocol.com.

12. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access.

13. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide notice via email or through the Services at least 30 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: hello@receiptprotocol.com
Website: receiptprotocol.com