EFFECTIVE OCTOBER 7, 2026
Privacy notice
Receipt Desk is operated by The Boss Factory, Dieppe, New Brunswick, Canada. Contact info@thebossfactory.ca about your personal information.
Receipt images can contain personal information. Before using AI processing, you must consent to sending the necessary receipt content and your compact business profile to OpenAI. You can use manual entry without AI processing.
Information the app uses
We store your account email, securely protected authentication information, business profile, categories, receipt originals, optimized processing copies, extracted receipt and item data, notes, your corrections and scoped categorization rules. Technical processing records include status, usage, failures, and estimated cost. A financial edit history records changes to your business records.
Optional accountant email is used to prefill your phone's email composer. Receipt Desk does not send account data to your accountant automatically. Review recipients and attachments before sending.
Why it is used
Your information enables sign-in, business-level access, private receipt storage, receipt interpretation and categorization, review, charts, filters, exports, account deletion, and controlled free testing. It is not sold or used for advertising.
AI processing and provider retention
With your consent, optimized receipt pages, a compact business description, categories, and relevant business-specific rules are sent to the OpenAI API. We do not send your entire receipt history. Completed processing is cached; opening a screen or creating a report does not trigger another AI request.
Requests use store: false. According to OpenAI's API data controls, API data is not used to train models by default unless an organization opts in. Standard abuse-monitoring logs may retain content for up to 30 days, with exceptions for legal or safety needs. This app does not claim Zero Data Retention. Provider processing can occur outside Canada. Do not upload data that your business is not authorized to process.
Storage, access, and logs
Originals and exports are stored in private storage. Access requires authorization for the relevant business; download links expire. Session credentials on mobile use the operating system's protected storage. The promotional website uses no tracking scripts. Operational logs avoid receipt contents and provider credentials.
These are implemented access controls, not a guarantee that any service is free of security risk. If you believe another person has accessed your account, contact support promptly.
Retention, export, and deletion
Active records remain until you confirm deletion. A canceled or expired subscription does not automatically delete your records or remove access to existing-record exports. You can export records in the app and delete your account in account settings or on the account-deletion page.
Confirmed deletion removes active account records and access to private receipt files. File cleanup is retried if an interruption prevents immediate removal. Anonymous processing-cost records, with account, business, and receipt identifiers removed, remain for up to 90 days to enforce usage budgets. A minimal deletion journal retains a hashed account identifier and associated business IDs so deleted records are not restored into service; it contains no receipt contents.
Backup rotation is configurable; the documented deployment default retains backups for 30 days. Backup copies may remain until that rotation expires. Operators must replay the current deletion journal before making a restored backup available so deleted accounts are not brought back into service. Provider retention and legally required preservation may be separate from active app storage.
Your choices
You can correct extracted fields, decline AI processing, export your records, request access or correction, and confirm account deletion. Camera and photo access are optional and requested when you choose the corresponding capture method. Importing a file uses the platform document picker.
Free testing and future subscriptions
Invited private testing is free and requires no payment card. Public subscription pricing is not approved yet. If subscriptions launch, the store will process payment; the app server will store the minimum transaction and entitlement information needed to verify access. Updated billing disclosures will accompany the enabled purchase flow.
Questions or changes
Contact info@thebossfactory.ca. Material changes to receipt processing or retention will be reflected in this notice and disclosed where consent is required.