Privacy Policy

1. Controller & Contact

The Service is operated by Pocketed.org, based in New South Wales, Australia. If you have any questions about this Privacy Policy or how we handle your data, you can contact us at [email protected].

2. Information We Collect

We collect information that you provide directly, information that is collected automatically when you use the Service, and information we receive from third parties.

• Account information: When you sign up or log in via our authentication provider, we may collect your name, email address, profile information and other details associated with your account.
• Receipt and transaction data: When you upload receipts or other documents, we process and store the images, extracted text, merchant details, dates, amounts, tax information and related financial data.
• Payment information: Subscription and payment processing is handled by our payment provider (such as Stripe). We do not store full payment card numbers. We may receive limited billing information, such as the last digits of your card, expiry date, and billing address, as needed for subscription management, invoicing and records.
• Usage and device data: We may automatically collect technical information when you use the Service, such as IP address, browser type, device identifiers, operating system, pages viewed, timestamps and other diagnostic and analytics data.
• Support and communications: If you contact us by email or through the Service, we may collect the content of your message, your contact details and any other information you choose to provide.

3. How We Use Your Information

We use your information for the following purposes:

• To provide, operate and maintain the Service, including OCR scanning and data storage.
• To create and manage your account, including authentication and subscription access.
• To process payments, manage billing and handle free trials and renewals.
• To improve and personalise the Service, including troubleshooting, analytics, and developing new features.
• To communicate with you about the Service, including updates, security notices and support.
• To comply with legal obligations and enforce our Terms of Service.

4. Legal Bases (if applicable)

Where applicable data protection laws require a legal basis (for example, for users located in the European Economic Area or United Kingdom), we rely on the following legal bases to process your information: performance of a contract (to provide the Service to you), compliance with legal obligations, and our legitimate interests in operating, improving and securing the Service. In some cases, we may also rely on your consent, which you can withdraw at any time.

5. Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: We may share data with trusted third-party providers who help us operate the Service, such as cloud hosting platforms, database providers, authentication providers, AI/OCR providers and payment processors. These parties are authorised to process your data only as necessary to provide services to us.
• Legal and compliance: We may disclose information if required to do so by law, regulation, court order or government request, or to protect our rights, property, safety or that of others.
• Business changes: If we undergo a reorganisation, merger, acquisition or transfer of assets, your information may be transferred as part of that transaction, subject to appropriate safeguards.

6. International Data Transfers

The Service may be hosted and operated using infrastructure located outside your state, province or country. By using the Service, you understand that your information may be transferred to and processed in other jurisdictions, which may have different data protection laws than those in New South Wales, Australia. Where required, we take appropriate measures to protect such transfers in accordance with applicable law.

7. Data Retention

We retain your information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes and enforce our agreements. Receipt data and associated records may be retained for your historical reporting and tax purposes for as long as your account remains active, unless you request deletion where applicable. We may retain certain information in backup or archive copies for a limited period consistent with our retention practices.

8. Security

We take reasonable technical and organisational measures designed to protect your information against unauthorised access, loss, misuse or alteration. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security of your information.

9. Your Rights & Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information, such as the right to access, correct, update or delete your information, restrict or object to certain processing, and data portability. You can manage much of your information directly through your account settings, or you may contact us at [email protected] to exercise your rights where applicable.

10. Children's Privacy

The Service is not intended for use by children under 16 years of age, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us so that we can take appropriate action.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top or bottom of this page. Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, you can contact us at [email protected].