Your receipts. Your privacy.
Last updated 16 September 2026
ReceiptBuddy is operated by Arlington North LLC ("we", "us"). This notice explains what the service stores, why, who it is shared with, and how to get it back or delete it. It describes what the software actually does; if we change the practices below, we will change this page.
What we collect
Account information. Your name, email address, and a password that is stored only as an Argon2id hash. We never store your password itself and cannot recover it.
Receipts you upload. The original photograph or PDF, a smaller preview image we generate, and the text our recognition step reads from it. Receipt images are private to your account.
Details you enter or confirm. Merchant, purchase date, amount, currency, tax, notes, folders, categories, and how you split a receipt across them.
Technical records. Your session, a CSRF token, rate-limit counters, and an audit log of account actions such as sign-in, receipt changes, and deletions. Our web server logs the page path, your IP address, and the response status. It deliberately does not log query strings, so the one-time links in verification and password-reset emails never reach a log file.
What we do not collect
No advertising or analytics trackers, no third-party cookies, no location data, no contacts, and no payment card numbers. The service uses a single session cookie that is required for you to stay signed in.
Why we process it
To run the account you asked for: store your receipts, read their details, organize and search them, produce your reports and exports, and send the transactional email the service depends on (address verification and password resets). We do not use your receipts to train machine-learning models, and we do not sell or rent personal information to anyone.
Who processes data on our behalf
We use a small number of providers, each for one purpose:
- Amazon Web Services (US East, N. Virginia) — application hosting, the database, encrypted receipt storage, and the text-recognition service that reads your receipts.
- Cloudflare — sits in front of the website for TLS, filtering, and the human verification check shown on the sign-up and password-reset forms.
- Mailgun — delivers verification and password-reset email. Click and open tracking are switched off.
These providers act on our instructions. We do not share your receipts with anyone else, and nothing on this list is an advertising or data-broker relationship.
Security
Traffic is encrypted in transit with TLS and the database connection requires a verified TLS certificate. Receipt files are stored encrypted at rest and are never made public — they are served only to your signed-in account, one request at a time. Uploaded PDFs are always delivered as downloads, never rendered inside the site. We use a strict Content Security Policy, verify a token on every state-changing request, and rate-limit sign-in, sign-up, and password-reset attempts.
No service can promise it will never be breached. We do not claim this one is unbreakable.
Keeping and deleting data
Your receipts stay until you remove them. Moving a receipt to Trash excludes it from reports; you can restore it. Requesting account deletion in Settings starts a 30-day grace period, after which the account, its receipts, and its stored files are permanently removed. A minimal deletion record is kept afterwards so we can show that the deletion happened. Expired sessions, used one-time links, and rate-limit counters are swept automatically. Export archives are removed after seven days.
Backups are retained on a rolling basis for disaster recovery and are overwritten in the ordinary course. Data may persist in a backup for a short period after deletion from the live service.
Your choices
You can view and correct every detail on a receipt at any time, export your confirmed expenses as a CSV with the original documents attached, and delete individual receipts or the whole account from Settings. If you are a California resident, the CCPA gives you the right to know what personal information we hold, to request its deletion, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information, so there is nothing to opt out of. Email us to exercise any of these rights; we may need to verify that you control the account.
Children
ReceiptBuddy is not intended for children under 13, and we do not knowingly collect their information.
Contact
Arlington North LLC — [email protected]