Privacy Policy

1. What We Do

InvoiceSnap ("InvoiceSnap," "we," "our") is a receipt scanner. You upload a receipt photo or PDF, an AI model reads it, and you get structured data (vendor, date, totals, line items) you can export. There are no user accounts. This policy explains exactly what data that involves and where it goes.

2. Receipt Images

When you scan, the image is sent over HTTPS to our server and passed to Google Gemini to be read. We process it in memory and discard it as soon as the result comes back. We never write it to disk, keep a copy, or use it to train models. Google processes the image under its Gemini API terms.

3. Scan Results

The extracted data is returned to your browser and saved there (IndexedDB), on this device only. It is not sent to our servers again, and it does not sync between devices. You can delete it on the Stash page or by clearing your browser storage.

One exception, only when you ask for it: if you export with "Totals in one currency", your browser sends each receipt's currency and date (nothing else) to our server to look up the ECB exchange rate for that day.

4. Free Scans

To enforce the 5 free scans per month without accounts, we count free scans in two ways:

• A device cookie (invoicesnap_device): a random ID, signed so it can't be forged. It lasts one year and is used for nothing but the free-scan count.
• Your IP address, as a monthly safety limit so clearing cookies doesn't reset the free tier.

Both counters are stored in our database with the month in their name and are deleted automatically at the end of that month.

5. Purchases, License Keys & Email

• Lemon Squeezy is our merchant of record. It handles checkout, payment and your billing details, including the email address you enter at checkout. We never see or store your card details.
• When you buy a pack, you get a license key. We store the key with its remaining credit balance, and your browser keeps a copy in local storage so paid scans work on that device.
• To deliver the key, we fetch your order from Lemon Squeezy and email the key to your checkout address through Resend. If you activate on a new device, we may ask you to type that same email so we can check it against the order. We use your email only for this and don't keep it in our own database.

6. Analytics

• PostHog (EU-hosted) records page views and a few product events (a scan started, finished or failed, free scans ran out, checkout clicked, purchase completed) so we can see where the flow breaks. These events carry timings and counts, never your receipts, amounts or file names. PostHog stores nothing on your device: instead of a cookie, it recognises a returning visit by a hash of your IP address and browser details that changes every day. We don't identify you. Before any URL is sent, we strip its query parameters (they can contain license keys), keeping only campaign tags.
• Error reports: if the page crashes, PostHog receives the error message and where in our code it happened, with links and license keys removed. Our server also sends PostHog anonymous scan statistics (which AI model answered, how long it took, whether it failed), with no receipt data and no identifiers.
• Vercel Web Analytics counts page views without cookies.

7. Cookies & Browser Storage

• invoicesnap_device: free-scan counting (see §4). Necessary for the free tier to work.
• Local storage and IndexedDB: your license key, your scan results, and checkout state for activating a purchase. These stay in your browser.
• If you run out of credits mid-scan, that one receipt photo is kept in your browser (IndexedDB) so you don't have to pick it again after buying. It is deleted once it's scanned or you discard it, and it expires after 24 hours.
• Files you share to the installed app (Android "Share") are held in the browser's cache only until the scanner picks them up a moment later, then deleted.

invoicesnap_device is the only cookie we set. Analytics stores nothing on your device (see §6), and we don't use advertising cookies or trackers.

8. Who Processes Data for Us

• Google (Gemini API): reads receipt images.
• Vercel: hosts the site and API. Its request logs include IP addresses.
• Upstash (Redis): stores free-scan counters and license-key balances.
• Lemon Squeezy: checkout and payments (merchant of record).
• Resend: sends the license-key email.
• PostHog: product analytics and error reports, EU region.
• Frankfurter: ECB exchange rates for exports. Our server asks it for currency codes and dates only, so it never sees you.

We don't sell your data, and we don't share it with anyone beyond these providers.

9. Retention

• Receipt images: not kept on our servers (see §2). A photo waiting at the paywall stays only in your browser, for at most 24 hours (see §7).
• Free-scan counters: deleted at the end of each month.
• License keys and balances: kept while the key exists, so your credits never expire.
• Scan results: only in your browser, until you delete them.

10. Your Rights

Depending on where you live (for example under the GDPR), you can ask to access, correct or delete personal data we hold about you, or object to its use. Because we have no accounts, the data we hold is limited to the items above. Email us with your license key or order number and we'll help. You can delete everything stored in your browser yourself at any time.

11. Changes to This Policy

We may update this policy as the service changes. Changes will be posted on this page with a new "Last updated" date.

12. Contact

Questions? Email us at support@getinvoicesnap.com.