Privacy Policy

RouteReceipts ("we," "us," or "our") operates as a Stripe App that provides selective receipt delivery for Stripe users. This Privacy Policy explains how we collect, use, and protect information when you install and use our application.

I. Information We Collect

Account Information

When you install RouteReceipts from the Stripe Marketplace, we receive your Stripe account ID and user ID through the Stripe Apps platform. We do not collect your name, email address, or password directly.

Customer Data

To provide receipt routing, RouteReceipts accesses the following data from your Stripe account through Stripe's permissioned API:

• Customer IDs and email addresses (read-only)
• Invoice event data (read-only)
• Charge and payment intent data (read-only)
• Charge receipt_email field (write, to trigger receipt delivery)

Allowlist Data

You provide customer IDs, email addresses, and optional notes when adding entries to your receipt allowlist. This data is stored to determine which customers should receive receipts.

Usage Data

We track the number of receipts processed per billing period to enforce plan limits. We also log receipt routing decisions (sent or suppressed) with the associated event ID and customer identifier for your audit trail.

II. How We Use Information

We use the information we collect to:

• Determine whether a receipt should be sent for a given invoice event
• Maintain your allowlist of approved receipt recipients
• Track usage against your plan limits
• Provide a decision audit log within the Stripe dashboard
• Process billing and subscriptions

III. Data Storage and Security

All data is stored in a managed PostgreSQL database hosted on DigitalOcean infrastructure in the United States. Data in transit is encrypted using TLS. We use Stripe's signature verification to authenticate all API requests between the Stripe App and our servers.

We do not store full invoice details, payment amounts, or sensitive financial data. We only store the minimum information necessary to make receipt routing decisions.

IV. Third-Party Services

RouteReceipts relies on the following third-party services:

• Stripe — Payment processing, webhook delivery, and the Apps platform that hosts our UI. Stripe's privacy policy is available at stripe.com/privacy.
• DigitalOcean — Cloud infrastructure and database hosting.

We do not sell, rent, or share your personal information or your customers' data with any third parties for marketing or advertising purposes.

V. Data Retention

• Allowlist entries are retained until you delete them or uninstall the app.
• Decision logs are retained for as long as your account is active.
• Usage data is retained for billing purposes and may be kept for up to 12 months after account cancellation.
• Subscription and billing data may be retained for up to 7 years to comply with tax and accounting obligations.

Upon uninstalling RouteReceipts, you may request deletion of all your data by contacting us. Deletion requests are processed within 30 days.

VI. Your Rights

You have the right to:

• Access the data we store about your account
• Delete your allowlist entries at any time through the Stripe dashboard
• Request full deletion of your data by contacting us
• Export your allowlist and decision log data

VII. Cookies

RouteReceipts operates entirely within the Stripe dashboard and does not use cookies or tracking technologies. Our landing website at routereceipts.app does not use cookies.

VIII. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated at least 30 days in advance. Non-material changes take effect immediately upon posting. Continued use of RouteReceipts after changes constitutes acceptance.

IX. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@routereceipts.app.