Privacy Policy

Restaurant QR acquisition

Rocket Receipts restaurant links record a server-timestamped link visit, restaurant/table source, coarse browser/platform and a random browser identifier. We use these to estimate daily browsers and link the most recent valid visit within 30 days to a new account. A QR-link visit does not prove a physical camera scan. Store clicks do not confirm an installation. Supported Android Play referrer reports and first authenticated app use are reported separately. Manually entered restaurant codes identify the table without claiming an exact visit match.

Anonymous visit details and browser markers are encrypted in the campaign's selected region and retained for 90 days. Account attribution and conversion details are encrypted in the account's home region until account deletion. Non-identifying daily counts may remain afterward. Authorized platform administrators can view reports across regions. We do not retain raw IP addresses, precise location or device fingerprints in these campaign records, and do not add a third-party attribution SDK. Your browser stores a random identifier and pending restaurant source; the app uses secure local storage. Existing identity, hosting and provider-processing exceptions described below still apply.

On a restaurant’s shared menu page, we count the shared-link visit separately. Viewing that page or opening its menu does not establish Rocket Receipts acquisition attribution. Choosing Get Rocket Receipts opens the separate acquisition journey. Published restaurant colors and logos appear on the page.

The supplied restaurant ordering destination remains unchanged and is not tracked by Rocket Receipts. The restaurant and ordering provider have their own privacy terms. Restaurant acquisition does not award customer referral rewards.

1. Introduction

RocketReceipts ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, and use our services (collectively, the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Service includes:

• Personal Data: Personally identifiable information, such as your name, shipping address, email address, and telephone number, and demographic information, such as your age, gender, hometown, and interests, that you voluntarily give to us when you register with the Service or when you choose to participate in various activities related to the Service.
• Financial Data: Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services from the Service. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored by our payment processor, Stripe, and you are encouraged to review their privacy policy and contact them directly for responses to your questions.
• Receipt and Document Data: We collect and process the receipts, invoices, and other documents you upload or email to the Service. This includes extracting data such as merchant names, dates, amounts, and line items using AI technologies.
• Email Access: If you choose to connect your email accounts (e.g., Gmail, Outlook, iCloud) to our Service, we access your emails solely for the purpose of identifying and extracting receipt and invoice information. We do not store your email credentials; we use secure OAuth tokens.
• Partner Referral Activity: When you choose a third-party partner offer, we record the partner, click time, selected region, app platform, your account identity, and the workspace you were using. The outbound link contains an opaque click identifier and campaign parameters, not your name, email, user ID, or workspace ID.

3. Where Workspace Data Is Stored

When you create a new regional workspace, you choose Canada, the United States, the United Kingdom, or the European Union as its home. New business records and uploaded files for that workspace are stored in that chosen AWS geography. The regional service also uses keys, jobs, and supported document processing in the chosen geography. Each workspace has one home; changing it requires a separate, verified migration.

If you had a workspace before the regional service, its earlier records and files remain in Google services and stay available as historical data. Choosing a region for future work does not move that history. Until we confirm your workspace cutover, new activity continues on its existing system. After cutover, new business records and files use your chosen AWS geography while the earlier Google history remains available.

Firebase Authentication processes account identity information in US data centers regardless of your workspace choice. Payment, email, calendar, banking, and other connected providers may process information under their own service locations when you use those features. Your workspace region is a location choice for Rocket Receipts business data on the regional service, not a promise that every third-party service holds all information there.

If you connect a Canadian or US bank through Flinks, a Rocket Receipts service in the United States sends requests to Flinks and passes the results to your workspace. This means banking information is processed in the United States even if you choose Canada, the United Kingdom, or the European Union for workspace storage. After your workspace moves to the regional service, new banking records are stored in your chosen AWS geography; earlier banking history may remain in Google services. Flinks may also retain information in Canada or the United States under its own privacy terms.

4. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

• Create and manage your account.
• Process your receipts and invoices to provide expense tracking and reporting.
• Email you regarding your account or order.
• Fulfill and manage purchases, orders, payments, and other transactions related to the Service.
• Generate a personal profile about you to make future visits to the Service more personalized.
• Increase the efficiency and operation of the Service.
• Monitor and analyze usage and trends to improve your experience with the Service.
• Notify you of updates to the Service.
• Offer new products, services, mobile applications, and/or recommendations to you.
• Perform other business activities as needed.

5. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
• Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.
• Financial-Service Partners: If you choose to visit a listed partner, that partner receives the opaque click identifier and campaign parameters in the link. Rocket Receipts keeps the corresponding referral record for reconciliation and may receive referral compensation. A partner receives personal details only if you provide them directly on its website or separately authorize their disclosure.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

6. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

7. Partner Referral Retention

Identifiable partner-click records are retained for up to 24 months and are removed sooner when your account is deleted. Non-identifying aggregate counts may be retained to measure partner activity. Pending offline click records remain on your device for no more than seven days unless submitted sooner.

8. Policy for Children

We do not knowingly solicit information from or market to children under the age of 13. If you become aware that any data has been collected from children under age 13, please contact us using the contact information provided below.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: