What we collect. What we don’t.

Anonymous visitors

You can use most of Receipts Report without an account. We don’t store your name, email, or IP. To enforce per-visitor rate limits we compute a one-way hash of (IP + user agent + a server secret) — we can’t reverse it to identify you, and it naturally rotates when you change network or browser.

Chat conversations you start are saved so the page can resume if you refresh. These rows are tied to the hash, not to you.

When you sign in

Sign-in is handled by Clerk. If you sign in we receive your email address and, depending on the provider, your name and an avatar URL. We store only what Clerk sends — no scraping of connected accounts for anything more.

Your Clerk user id becomes the owner of any conversations or dashboards you create.

When you subscribe

Paid tiers are billed through Stripe. We never see or store your card details — Stripe handles all payment data directly. What we store is a Stripe customer id, the subscription status, and the tier you’re on.

Cancel anytime from the billing portal. Prorated refunds within 30 days by emailing hello@receipts.report.

Analytics & logs

We use PostHog for product analytics and error reporting — it sees anonymous page views and feature interactions. Server logs retain request metadata for 30 days for debugging, then roll off.

We don’t sell data. We don’t run ad retargeting. We don’t fingerprint beyond the rate-limit hash above.

Cookies

PostHog sets a first-party analytics cookie (ph_<project-key>_posthog) for every visitor — it holds an anonymous device/session id so we can tell one visit from another, and it lasts up to a year. We route it through our own domain, not PostHog’s, so it’s ours, not a third party’s. Clerk sets a session cookie when you sign in, and Stripe sets one during checkout. We don’t set any third-party ad-tracking cookies.

AI-generated content

Receipts Report uses large language models to generate explanations, charts, and commentary. Every number carries a citation chip linking to the underlying primary-source row. Models can still be wrong about things outside the data; verify before republishing.

Your rights

You can ask us to delete your account, conversations, and dashboards at any time. Email hello@receipts.report from the address tied to your account.

If you’re in a jurisdiction with GDPR or CCPA rights, you have the usual ones (access, correction, deletion, portability). Same email.

Who we are

Receipts Report is a product of Adaptrex, LLC, a United States limited liability company. Contact: hello@receipts.report.

Changes

If this policy changes materially, we’ll post the new version here with a revised date and — if you have a paid subscription — email you.