Privacy policy

Who is responsible

The service is operated by Samro Studios Inc. (Quebec enterprise number 1182334574), in Laval, Quebec.

The person in charge of the protection of personal information is Sami Bdeira. You can reach them at confidentialite@samrostudios.com.

What we receive

• The receipt photos and PDFs you drop, while they are read. A receipt can hold personal information: the name and address of a store you visited, a date and time, the items bought, amounts, sometimes the last digits of a card, an authorization number or a first name.
• At payment, Stripe collects your email and payment details. From Stripe we receive your email, the amount, the payment reference and, to calculate sales tax, your province. We send Stripe the price, the language of the page, an encrypted fingerprint of the result, the number of receipts and a marker that says the payment comes from Receipts to Spreadsheet. Never a store, a date or an amount from your receipts.
• Limited technical logs: file size, number of receipts, payment reference, error code, duration, a status word (for example "paid", "free" or the file format) and whether the reading was of the sample or of a real receipt. They hold no store, date or amount from your receipts, and no IP address.
• Your feedback, only if you answer the question asked after a paid download (see "Your feedback" below).

The site uses no advertising cookies and no tracking tools.

How your receipts are read

• Before sending, your browser shrinks the photos and saves them again as JPG. In the usual case, this also removes hidden photo data such as GPS location. HEIC photos are converted on your device. PDFs, and the rare photos your browser cannot open, are sent as they are, with the hidden data they hold, for example their author's name if it is there.
• On our servers, each receipt is held in memory while it is read. It is never written to a disk or a storage service.
• To read the image, we send it to Anthropic (Claude), an artificial intelligence service run by Anthropic, PBC in the United States. It receives the receipt image or PDF and our reading instructions, nothing else: we do not send it your name, email, IP address or file name. If our code finds an error in the first reading, the receipt is read a second time by a more capable model from the same provider.
• Our own code then checks every number: the sum, the total, the date and the taxes expected for the province. If a number fails these checks, we tell you before payment, and the row is marked "Check this one" in the file. A file we cannot read at all is refused: it does not go into the table.
• The result for each receipt is sent back to you encrypted (AES-256-GCM). Only our server holds the key, and the result expires after 1 hour. After a confirmed payment, it can still be used for the download for 24 more hours.
• Before payment, your browser only receives the first rows and their totals in readable form. For the other rows, it only receives their number, their confidence mark and, where it applies, the check that did not pass: never a store, a date or an amount. The blurred rows in the preview are empty shapes, not your data.
• When you download, our server decrypts the result, builds the Excel or CSV file and sends it to you. It keeps no copy.

The artificial intelligence service

• Provider: Anthropic, PBC, headquartered in the United States.
• Where it is processed: in the United States. We ask the provider to process our requests in the United States.
• No training: under the provider's commercial terms, data sent through its programming interface is not used to train its models.
• Retention: under its terms, the provider deletes the data from these requests within 30 days. Content flagged by its safety systems may be kept longer, up to 2 years.
• We keep neither the images sent nor the provider's answers.

Before using this service, we completed a privacy impact assessment, as Quebec law requires, because your receipts are communicated outside Quebec.

Where your data is processed

The site is hosted by Vercel Inc., a United States company.

Images are read in the United States, at Anthropic, PBC.

Stripe processes payments. Stripe may process data outside Quebec and Canada, under its own privacy policy.

Our small database is hosted by Neon in the United States (Virginia). It holds the fingerprints and counters described below, Stripe payment references, the day's total spent on automatic reading, and feedback. It never holds your receipts, your file, your file name or your email.

How long we keep your information

• Your receipts: not kept by us. They leave our servers' memory as soon as the answer is sent.
• At the artificial intelligence provider: 30 days at most, under its terms (see above).
• The encrypted result: in your browser only, 1 hour at most, or 24 more hours after a confirmed payment.
• Payment information received from Stripe: as long as tax law requires, usually 6 years.
• Technical logs: 30 days at most.
• The fingerprint of your connection address (see below): one day at most.
• In our database, Stripe payment references, with a record of a file handed over or a refund made: 400 days at most. References of payment notices sent by Stripe: 30 days.
• Your feedback, if you leave some: until you ask us to remove it.

Protection against abuse

To limit abuse of the free preview, we count the receipts each visitor sends, and the previews, payments, downloads and feedback they ask for. For this we keep a one way, salted fingerprint of your connection address and a counter, never the address itself. It expires at the end of the limit window (one day at most) and is then deleted automatically. This, and Stripe payment references, are kept in a database hosted by Neon in the United States (Virginia).

Your feedback

After a paid download, we ask you once how it went. Answering is optional, and it changes nothing about your right to a refund.

If you answer, we keep: your rating, your comment if you write one, your first name or initials and your city if you give them, your answer to "May we show this?" with its date and time, the language of the page, the currency you paid in and the date of the feedback. The feedback is linked to your payment by a one way, salted fingerprint, so that one payment gives only one rating. We never keep your email, your file or your connection address with your feedback.

Your comment, first name and city are shown only if you say yes, and only after we have read them. They appear in the reviews section of our home page. Every rating counts in the average shown, including the ones that are not published.

To remove your feedback, write to confidentialite@samrostudios.com. We then erase your words, your first name and your city, and the feedback is no longer shown. Only the rating stays in the average, with nothing that names you.

Your rights

You can ask to access, correct or delete your information, and withdraw your consent. Write to the person in charge at the address above. We answer within 30 days.

Since we do not keep your receipts, we cannot give you a copy after they are read.

You can also file a complaint with the Commission d'accès à l'information du Québec.

Incidents

If a confidentiality incident presents a risk of serious injury, we notify the people affected and the Commission d'accès à l'information, as the law requires.

Changes

We post any change on this page, with its date. Last updated: 2026-09-28.