Privacy Policy

Last updated: March 19, 2026

1. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and password (hashed). If you sign in with Google, we receive your name, email, and profile picture from Google.

Usage Information

We collect information about how you use the Service, including templates viewed, documents created, exports generated, and credit transactions.

Payment Information

Payment processing is handled by Paddle. We do not store your credit card information. Paddle may collect payment details in accordance with their privacy policy.

Uploaded Content

If you upload logos or images to templates, these are stored in our secure storage system. Generated PDFs are stored temporarily for download purposes.

2. How We Use Your Information

To provide and maintain the Service
To process transactions and manage your account
To send service-related communications (account confirmations, receipts, updates)
To improve the Service and develop new features
To detect and prevent fraud or abuse
To comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share information with:

Service providers: Supabase (hosting/database), Paddle (payments), and cloud infrastructure providers necessary to operate the Service
Legal requirements: When required by law, subpoena, or government request
Business transfers: In connection with a merger, acquisition, or sale of assets

4. Data Retention

We retain your account data for as long as your account is active. Generated PDFs are retained for 90 days after creation. You may request deletion of your account and associated data at any time.

5. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the Service to function. We do not use advertising or tracking cookies.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access your personal data
Correct inaccurate data
Delete your data
Export your data
Opt out of marketing communications
Restrict processing of your data

For California Residents (CCPA/CPRA)

You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

For EU/EEA Residents (GDPR)

Our lawful basis for processing is contract performance (providing the Service) and legitimate interest (improving the Service and preventing fraud). You may exercise your rights under GDPR by contacting us.

7. Security

We implement industry-standard security measures including encrypted data transmission (TLS), secure password hashing, and access controls. However, no method of transmission over the internet is 100% secure.

8. Children

The Service is not intended for children under 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Service.

10. Contact

For privacy-related inquiries, contact us at privacy@printablereceipts.com.