Política de privacidad

Tus archivos permanecen en tu dispositivo

Reading receipts, invoices and bank statements, and almost every PDF tool (merge, split, compress, rotate, watermark, image conversion, OCR), runs entirely in your browser using WebAssembly. Your files, the images made from them, the text read from them, and the figures extracted — dates, merchants, amounts, account numbers — stay on your device. They are never uploaded to us, never stored by us, and never sent to any third party.

This is true in the signed-in workspace too. Having an account changes what is saved about your settings and usage (below); it does not change where your documents are read.

Conversiones en el servidor

A small number of tools (high-fidelity Office ↔ PDF conversion, Pro only) send the file you chose to a stateless conversion service over an encrypted connection. The file is processed in memory, returned to you, and deleted immediately. We do not store it and we do not log its contents. These tools are labelled “Server convert” before you use them.

Tu cuenta

The public PDF tools need no account, except OCR (reading scanned pages). The workspace (expense claims, invoices, bank statements) and OCR need a free account, so that the monthly free allowance can be counted and your settings can follow you between computers.

Accounts are provided by Clerk. Clerk holds your email address, your name if you give one, the sign-in method you use (for example Google), and sign-in security records (device, browser, time and IP address of sign-ins) that it uses to protect your account. We receive a Clerk user identifier, which is how everything else below is linked to you.

Qué guarda el espacio de trabajo

For a signed-in account we store one settings record, containing only:

• Merchant corrections you made. When you correct a merchant name in the review screen, we save the corrected name together with what identifies that merchant on the receipt — its printed phone number or tax number, or, where the receipt prints neither, a short list of distinctive words from it — so it can be filled in next time.
• Your preferences, such as how many receipts per page for the A4 paste-up, your base currency and any exchange rates you set yourself.

It never contains your documents, their images, their full text, or any date, amount, total or account number from them. The record is validated against a fixed schema before it is written, so nothing outside this list can be stored in it.

Exchange rates. When an export converts a foreign amount, your browser asks our server for the reference rate of one date and one pair of currency codes (for example 2026-06-16, USD to HKD) — never the amount or the document. Our server fetches the rate from the European Central Bank or, for currencies the ECB does not publish, from the fawazahmed0 currency data on jsDelivr, so those providers see our server, not you.

Teams. If you create or join a team, its name, its members and their roles (admin or member) are held by Clerk, our sign-in provider. With a team selected, the settings above are the team's: stored once for the team and used by every member. A member's account corrections are sent to the team's admins as suggestions — the merchant name and the account, nothing else. A team's settings are deleted when the team is deleted. A team's Business subscription is a billing record of the team, kept like any other (see Retention).

Corrections you made on a computer before signing in stay in that browser. The first time you open the workspace there, we ask whether to copy them to your account; nothing is copied unless you agree.

Cómo se cuenta la cuota gratuita

Free accounts may process 30 receipts and invoices, and have 30 pages read by OCR, a month. To count them without seeing them, after a batch is read your browser sends us, for each file:

• a SHA-256 fingerprint of the file — a fixed-length code computed from its bytes, from which the file cannot be reconstructed; and
• how many receipts were found in it, or how many of its pages were read by OCR.

We do not store the fingerprint itself. We store a keyed version of it (HMAC-SHA256 with a secret held only on our server), so the stored value cannot be compared against a known file by anyone without that secret. It is stored with that number and the month, so that processing the same file again in the same month is free. These records are deleted at the start of the next month. Pro accounts are not counted and nothing is stored for them.

Credenciales firmadas y código Pro

To stop the free allowance and Pro features from being switched on by editing the web page, our server gives your browser short-lived signed passes (valid for 10 to 30 minutes) stating your account identifier, your plan, and how much of this month's allowance you have used, or which file fingerprints a batch covers. They are held in memory in your browser and are not stored by us.

Some Pro features are delivered as code that our server sends only to Pro accounts, after checking your subscription. That request carries your sign-in session; we do not log it.

Prevención de abusos

So that the free allowance is fair — not used again and again by opening new accounts, by people or by automated sign-ups — our server remembers which free accounts have used their allowance from each network (IP) address, and refuses a free account beyond 3 from the same address. This is kept permanently, because the rule only works if it remembers past accounts. The address itself is never stored: our database keeps only a keyed one-way hash of it, which cannot be turned back into the address. If you delete your account, these records are kept but no longer linked to you. Several people sharing one network (an office, some mobile networks) can reach the limit; contact us and we can exempt your account. Request rates are limited the same way, counted against the same kind of hash (or your account id) and deleted once the minute has passed. Clerk separately applies bot detection, email verification and blocking of disposable email addresses when accounts are created.

Analítica

Only with your consent, we collect anonymous usage analytics — which tool was used, whether it succeeded, and roughly how long it took. We never collect file names, file contents or extracted figures. You can decline analytics in the cookie banner at any time.

Cuentas y facturación

Payments are processed by Stripe. Stripe collects your card details and billing information directly; we never see or store card numbers. We store the Stripe customer and subscription identifiers, the price you subscribed to, the subscription status and the end of the current billing period, linked to your account identifier, so that we can tell whether your account is on Pro.

Guardado en tu navegador

Your browser keeps, on your device only:

• your theme and language choices, and the OCR languages you last used;
• when you use the public tools without an account, the merchant corrections described above;
• the slip layout you last confirmed on a sheet of taped-on receipts, and a log of how far the automatic slip detection was from what you confirmed (sizes and positions of boxes only — no text, amounts or images);
• your cookie-banner choice, and your answer to the offer to copy corrections to your account;
• Clerk's sign-in session cookies, when you are signed in.

You can clear all of it at any time from your browser's site-data settings.

Proveedores de servicios

These providers process personal data for us, each only for the purpose stated:

• Clerk — accounts and sign-in.
• Stripe — payments and subscriptions.
• Our hosting and database providers — running the website and storing the account records above.
• Our conversion host — Office ↔ PDF conversions, in memory only.
• An analytics provider — only if you consent to analytics.

A current list with locations is available on request.

Plazos de conservación

• Account and settings record: until you delete your account (it is then deleted automatically, straight away) or ask us to.
• Free-allowance records: deleted automatically within an hour after the month ends.
• Hashed network addresses for abuse prevention: kept permanently; unlinked from your account when you delete it.
• Record of actions our staff take on your account (for example granting a subscription or resetting your allowance): two years.
• Subscription records: for as long as the law requires us to keep billing records.
• Files sent for server conversion: deleted as soon as the converted file is returned.

Transferencias internacionales

The website is used worldwide and our providers may process data outside your country or region. Where the law requires it, such transfers are covered by appropriate safeguards, such as the European Commission's standard contractual clauses.

Tus derechos (RGPD / CCPA)

Depending on where you live — including under the EU and UK GDPR, the California Consumer Privacy Act, Hong Kong's Personal Data (Privacy) Ordinance, Macao's Personal Data Protection Act and mainland China's Personal Information Protection Law — you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict its use, and withdraw consent you gave. We do not sell or share personal data for advertising. Because we never receive your documents, there is no document data to export or delete. Contact us at the address below; we reply within one month. You may also complain to your local data-protection authority.

Menores

The service is not directed at children under 16, and we do not knowingly create accounts for them.

Cambios en esta política

If this policy changes, the date at the top changes with it. Material changes to what we collect will be announced in the workspace before they take effect.

Contacto

support@theaccountingtools.example — replace with a real contact address.