AI Receipts

Privacy Policy

Last updated 15 September 2026

Receipts carry more than a total — supplier names, card digits, sometimes your name. This is what we collect, why, where it lives, and who can see it.

1. Who we are

AI Receipts (“we”, “us”) runs the AI Receipts app, which reads photographed receipts and prepares records for you and your accountant. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

By using the app you agree to this policy. Read it together with our Terms of Service.

2. What we collect

  • Account details: your name, email address and password. The password is stored only as a one-way hash.
  • Business details: what you enter about your workspace, such as its name and ABN.
  • Receipts and documents: the photos and files you upload, and what is read from them — supplier, ABN, date, amounts, GST and line items. Receipts can also carry incidental personal information, such as the last digits of a card, a loyalty number or a name.
  • People you invite or share with: the email addresses of teammates you invite to a workspace and of accountants you send a link to.
  • Billing: your plan, pack credit, invoices and payment status. Card details are collected by our payment processor; we never see or store the full card number.
  • Technical and security information: IP address, browser and operating system, sign-in times, and a log of significant actions in your workspace.

3. How we use it

  • To run the app: read your receipts, store them, and prepare exports.
  • To deliver what you ask for: invitations, sign-in and verification emails, and the links you send your accountant.
  • To take payment, issue tax invoices and apply your plan.
  • To keep accounts safe — for example, emailing you when your account is signed in from a browser or device we haven’t seen before.
  • To give support, fix faults and improve accuracy.
  • To meet our legal obligations.

We don’t sell your information and we don’t use it for advertising. We may email you about the service; you can opt out of anything that isn’t about your account, security or billing.

4. How receipts are read by AI

When you upload a receipt, the image is sent to a third-party AI service, which returns the figures it reads. The provider processes it on our behalf only to return that result.

AI can misread a document. Readings it is unsure of are flagged for you to check, and you should review every figure before relying on it.

5. Where it is stored, and how it is protected

Receipt photos and files are stored in Australian data centres. Account and receipt data is held in a managed database run by a specialist hosting provider. Data is encrypted in transit and at rest, and access is restricted to the systems and people who need it.

Links you send an accountant are secured with a long random code, stored by us only in hashed form. Anyone holding the link can open it, so send it only to the person it is meant for.

No system is perfectly secure, and we can’t guarantee that information will never be accessed without authorisation. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

6. Who can see it

  • Your workspace. People you invite can see that workspace’s receipts.
  • Your accountant. Anyone holding a link you send can view and download the records in it for 90 days, unless you turn the link off sooner.
  • Our support staff. A small number of staff can view a workspace’s records, read-only, to help with support and fix faults. Their access is logged.
  • Service providers who process information for us: cloud hosting, file storage and database providers, email delivery, an AI service that reads receipts, and our payment processor. Supplier ABNs are checked against the Australian Business Register.
  • Authorities, when the law requires it.
  • A buyer or successor, if the business is sold or restructured, under this policy.

7. Overseas processing

Your files are stored in Australia, but some providers process information outside it. Our AI and payment providers may process it in the United States and other countries, and our hosting, database and email providers may access it from overseas to support their services. We take reasonable steps to ensure these providers protect it to a standard consistent with the Australian Privacy Principles.

8. How long we keep it

  • Receipt originals are kept for five years, the period the ATO generally requires business records to be kept. Binning a receipt removes it from your lists, and you can restore it for 30 days, but the original is still retained.
  • Uploads that were never business records — the wrong photo, a personal receipt — can be removed permanently by the workspace owner with “Delete for good” from the bin.
  • Account and billing records are kept while your account is open, and afterwards for as long as tax and other laws require.
  • Backups may hold deleted information for a limited period before it is overwritten.

9. Cookies

We use two cookies, both essential: one keeps you signed in, and one remembers whether you chose a light or dark theme. We don’t use advertising cookies or third-party tracking. Our payment processor sets its own cookies on its checkout and billing pages to prevent fraud.

10. Your choices and rights

You can:

  • Access and correct your information — most of it directly in the app.
  • Export your receipts and records at any time.
  • Ask us for a copy of the personal information we hold about you.
  • Ask us to close your account and delete your information, subject to the records we must keep by law.
  • Opt out of non-essential emails.
  • Complain to us, and if you’re not satisfied with our response, to the Office of the Australian Information Commissioner (www.oaic.gov.au, 1300 363 992).

You can use the app without giving your real name, but we need a working email address to run your account.

11. Children

AI Receipts is for businesses and adults. It isn’t intended for anyone under 18, and we don’t knowingly collect information about children.

12. Changes to this policy

We may update this policy. The date at the top shows when it last changed, and we will email account holders about significant changes.

13. Contact us

For privacy questions, requests or complaints, email info@aireceipt.com.au. We aim to respond within 30 days.