Privacy
policy.

Ripceipt ("we," "us," "our") is a receipt data extraction product operated by Day Moon Development. If you have any privacy questions, you can reach us at support@ripceipt.com.

We collect three categories of data:

• Account data. Your email address, workspace name, and authentication information when you create an account. Billing details (handled by Stripe; we never see your full card number).
• Receipt content. The files you upload (photos, PDFs, screenshots, hosted URLs) and the structured data we extract from them. This includes line items, totals, merchant, payment method, and the natural-language summary.
• Usage data. API request metadata (timestamps, workspace, response status), webhook delivery logs, and anonymized analytics about how the dashboard is used.

We use your data only to:

• Provide the extraction service you signed up for.
• Run usage and billing under your subscription.
• Respond to your support requests.
• Detect and prevent abuse, spam, and security issues across the service.
• Improve the service in aggregate (we do not train AI models on your individual receipts).

We share data with a small set of vendors that help us deliver the service. The current list is on our security page and includes Vercel (hosting), Supabase (database and storage), Stripe (billing), and a vision-language AI provider (extraction). We update the list before adding new processors.

We do not sell your data. We do not share it with advertisers. We will share it only when legally compelled, and we will tell you unless we are forbidden from doing so.

Ripceipt gives you three retention modes per receipt, with a workspace-level default:

• Retain everything (default). We keep the file and structured data so you can re-export and review.
• Delete the file. After extraction, we delete the original file and keep only the structured data.
• Delete everything (webhook-gated). Once your webhook acknowledges receipt, we delete both the file and structured data. Your system becomes the system of record.

When you cancel your account, we delete your account data and any receipts retained on our side within thirty days, unless we are legally required to keep them longer (for example, billing records).

You can:

• Access and export your data from the dashboard at any time.
• Delete your account and your data on request.
• Opt out of analytics in the dashboard settings (it is on by default but anonymized).
• Ask us to correct, restrict, or transfer your data. Email support@ripceipt.com and we will respond within thirty days.

If you live in the EU, UK, or California, you have additional rights under GDPR, the UK GDPR, and CCPA respectively. We honor those rights for everyone, regardless of where you live.

We use a small number of strictly necessary cookies for authentication and session management. Analytics cookies are loaded only with your consent and can be disabled at any time without affecting how the service works.

Our infrastructure runs primarily in the United States. By using the service, you understand that your data may be transferred to and processed in the United States. We rely on standard contractual clauses where required for transfers from the EU and UK.

We will update this policy when our practices change. The date at the top of this page reflects the most recent revision. For significant changes, we will notify account holders by email and give reasonable notice before the change takes effect.

Email support@ripceipt.com for privacy matters, or use the contact page for general inquiries.