Who we are
Receiptter (“Receiptter”, “we”) is in a trial period. The details of the company that operates it are not published yet; they will be in the legal notice before the first payment is taken. Write to us through the contact form.
Our two roles
For receipt data a shop sends us, the shop is the controller and we are its processor under Article 28 GDPR, acting on the shop's instructions under our Data processing agreement. For merchant accounts and our website, we are the controller.
Shoppers who tap a tag
- Receipt contents sent by the shop's POS: items, prices, VAT, total, payment category (for example “Card”), fiscal reference, store and till. We do not receive card numbers; digit sequences of six or more are masked on arrival.
- A device identifier stored in a strictly necessary cookie, so the same phone can reopen its receipt and two phones never collect the same one.
- Technical data: IP address, used briefly for rate limiting and security, not linked to the receipt.
- Optional: an email address and consent record if you subscribe to the shop's newsletter, and a rating and comment if you leave private feedback. Both go to the shop.
We do not ask for your name, do not create a profile and do not use the data for advertising.
Merchants and their staff
Email addresses and names of the owner and staff members, their role and stores, passwords (stored only as salted hashes), the two-step verification secret (encrypted) and hashes of recovery codes, sign-in sessions with the browser and device name, business name, address and VAT ID, store and till names, settings, API key hashes, encrypted payment-provider credentials, billing records and an audit log of account actions.
Website visitors
If you use the contact form, we store your name, email, business, number of stores and message to reply to you. The website uses no tracking or advertising cookies.
Legal bases
| Purpose | Basis |
|---|---|
| Delivering receipts (as processor) | The shop's instructions; the shop's own basis, usually contract |
| Merchant and staff accounts, billing | Contract, Art. 6(1)(b); legal obligation for invoices, Art. 6(1)(c) |
| Security, rate limiting, fraud prevention, session list | Legitimate interests, Art. 6(1)(f) |
| Replying to contact requests | Steps before a contract or legitimate interests |
| Newsletter sign-ups (for the shop) | Consent, Art. 6(1)(a), collected for the shop |
Sharing
We share data only with the shop that issued the receipt and with the subprocessors that run our service. We never sell personal data.
If a shop uses a till station with photo reading switched on, a photo of the printed receipt is sent to our AI provider so that the item lines can be read. The photo shows only what is printed on the receipt, is not kept after reading and is not used to train AI models. Sales advice for shops is generated from aggregated numbers only, never from data about individual shoppers.
International transfers
Our database is located in Western Europe. Some subprocessors may process data outside the EEA, for example for global network delivery; such transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.
Retention
- Uncollected receipts expire after the shop's claim window (by default 3 minutes) and are deleted with the shop's data.
- Collected receipts are kept as long as the shop's plan provides (15 months on Receipts, 25 months on Pro, or as agreed in a custom plan), unless the shop sets a shorter period (from 3 months). The copy as printed, sent by a print agent, is kept 90 days. Everything is deleted within 30 days after the account ends.
- Sign-in sessions end after 14 days or when signed out. Rate-limit counters and tap sessions are deleted within hours. Billing records are kept as required by tax law.
Your rights
You can ask for access, correction, deletion, restriction, portability and object to processing. For receipt data we pass your request to the shop that controls it. You can also complain to a supervisory authority; in Bulgaria this is the Commission for Personal Data Protection (КЗЛД, cpdp.bg).
Changes
We will post changes here and notify merchants by email before material changes take effect.