Privacy Policy
Last updated: 18 April 2026 · Effective date: 18 April 2026
ReceiptAtlas ("we", "us", "our") is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, store and disclose your personal information when you use ReceiptAtlas at www.receiptatlas.com.
1. What information we collect
- Account information — your first name, last name, email address, and optionally your phone number when you create an account.
- Receipt data — images of receipts you scan or upload. These are processed by Anthropic's Claude AI to extract store, date, items and totals. Receipt images are stored securely in Cloudflare R2 cloud storage on all plans.
- Extracted receipt data — structured data extracted from your receipts (store name, date, location, items, prices) stored in Upstash Redis.
- Location data — if you grant location permission at the time of scanning, your approximate GPS coordinates may be attached to a receipt as a fallback location. We do not track your location continuously.
- Payment information — billing details processed securely by Stripe. We do not store your card number or full payment details.
- Usage data — scan counts, subscription plan, and session token information stored to operate the service.
2. How we use your information
- To provide and operate the ReceiptAtlas service
- To process your receipt images using AI and store extracted data
- To enable search across your receipt history
- To process subscription payments via Stripe
- To reset your password when requested
- To respond to support enquiries
3. How we store your information
Your data is stored across the following infrastructure, all of which maintains high security standards:
- Cloudflare R2 — receipt images stored in object storage with Cloudflare's global security infrastructure. Data residency: Oceania region.
- Upstash Redis — account data and extracted receipt data stored in managed Redis. Region: Sydney, Australia (ap-southeast-2).
- Vercel — our application is hosted on Vercel's serverless infrastructure with automatic HTTPS encryption.
- Anthropic Claude API — receipt images are sent to Anthropic for AI processing. Anthropic does not store or train on your data. See Anthropic's privacy policy.
- Stripe — payment processing. See Stripe's privacy policy.
4. Data retention
We retain your account data and receipt history for as long as your account is active. If you delete your account, we will remove your personal information, account data, and receipt images within 30 days. Some anonymised usage logs may be retained for a limited period for operational and security purposes.
5. Sharing your information
We do not sell, rent or share your personal information with third parties for marketing purposes. We share data only with the infrastructure providers listed above as necessary to operate the service.
6. Your rights
You have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at hello@receiptatlas.com or use the account deletion page.
7. Cookies and local storage
ReceiptAtlas uses browser local storage to maintain your login session and store offline receipt queue data. We do not use third-party advertising cookies or tracking scripts.
8. Children's privacy
ReceiptAtlas is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children.
9. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of ReceiptAtlas after changes constitutes acceptance.
10. Contact us
For privacy enquiries: hello@receiptatlas.com