Privacy Policy

Last updated: 9 November 2026 · Data controller: Devthinking · Contact: [email protected]

1. Scope

This policy describes how ReceiptSheet (https://receipt.devthinking.com) handles information when you use the Service.

2. What we collect

• Documents you submit for extraction (pasted text, images, PDFs) — processed to produce editable rows.
• Technical data: IP address, browser user-agent, approximate timestamps, and basic product events (e.g. extract started/completed).
• Optional feedback: message text and email if you choose to provide them.
• Billing: plan status and license keys. Card payments are handled by our payment partner; we do not store full payment card numbers.

3. Why we use data

• Provide extraction, editing, and CSV export;
• Enforce free/paid quotas and prevent abuse;
• Respond to support and feedback;
• Improve reliability and fix extraction bugs;
• Meet legal and payment-network obligations.

4. AI and processors

If an AI extraction key is configured, document text or images may be sent to a third-party model provider (for example an OpenAI-compatible API) solely to propose field values. Local heuristics may run without that step. Prefer redacting unrelated personal data before upload.

Payment checkout is processed by Dodo Payments (Merchant of Record). Hosting and logs may use our VPS / infrastructure providers.

5. Cookies and analytics

We use essential browser storage (e.g. localStorage) for recent exports and license activation on your device. We do not run third-party advertising cookies on the product page.

6. Retention

Uploaded files are processed to return results; we do not operate a long-term document library for free users. Server logs and feedback entries may be retained for a limited period for security and support (typically up to 90 days unless a longer period is required for disputes or law). License and billing records are kept as needed for subscriptions and accounting.

7. Sharing

We do not sell personal data. We share data with processors only as needed to run the Service (hosting, AI extraction when enabled, payment provider) or when required by law.

8. International transfers

Servers or processors may be located outside your country. By using the Service you understand that processing may occur in those locations under this policy.

9. Your rights

Depending on your jurisdiction, you may request access, correction, or deletion of personal data we hold, or object to certain processing. Email [email protected] with the subject “Privacy request”. We may need to verify your request.

10. Children

The Service is intended for adults and business users. It is not directed to children under 16 (or the higher age required in your region). Do not submit children’s data.

11. Changes

We may update this policy; the “Last updated” date will change. Continued use after changes means you accept the updated policy.

12. Contact

Privacy questions: [email protected]