Privacy Notice

Margarida Pinto, trading as “AI for Good Studio”, Porto, Portugal, is the data controller for personal data processed through this website and service. Contact: privacy@aireceipt.eu.

Account data (email address, name if provided, login identifiers, and Google account identifiers if you sign in with Google) — to create and secure your account. Legal basis: performance of our contract with you.

Receipt and workspace content (titles, authors, declarations, team membership, roles, invites) — to provide the service and publish the receipts you choose to publish. Legal basis: performance of our contract.

Subscription and billing records (plan, seat count, subscription and transaction identifiers, status, renewal and payment-failure events supplied to us by Paddle) — to give you the plan you paid for, enforce plan limits, send billing notifications and meet accounting obligations. We never see or store your full card details. Legal basis: performance of our contract and compliance with legal obligations.

Email delivery records (recipient address, message type, delivery outcomes such as sent, bounced or complained) — to operate notifications reliably and stop sending to addresses that bounce. Legal basis: legitimate interests in reliable communication.

Support and contact messages — to answer your enquiry. Legal basis: legitimate interests.

Technical logs (IP address, browser type, requested page, error traces) — to deliver the site securely and diagnose faults. Legal basis: legitimate interests in security and service reliability.

The public receipt generator on the home page runs entirely in your browser; nothing you type there is sent to us unless you sign in and save a receipt.

Paddle.com Market Ltd — our reseller and Merchant of Record. Paddle handles checkout, payments, subscription management, tax compliance, invoicing and refunds, and acts as an independent controller for that payment data under its own privacy notice. Paddle sends us the subscription and transaction details we need to provision your plan.

Service providers (processors) — hosting and database infrastructure, email delivery, and error monitoring, all acting on our instructions under contract.

Professional advisers (accounting, legal) and authorities where we are legally required to disclose. We do not sell personal data.

Some providers process data outside the EEA. Where that happens we rely on adequacy decisions or the European Commission's Standard Contractual Clauses together with appropriate technical safeguards.

Account, receipt and team data is kept while your account is active and for up to 30 days after deletion, except receipts you have deliberately published, which remain publicly until you unpublish them. Billing and invoicing records are kept for as long as tax and accounting law requires (generally 10 years in Portugal). Email delivery logs are kept for 24 months, technical logs for up to 12 months, and support correspondence for as long as the enquiry or relationship reasonably requires. After that, data is deleted or anonymised.

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls in our database so users can only reach their own or their team's data, and least-privilege access for administrative operations.

If you are in the EU/EEA you may request access to, rectification of, or erasure of your personal data, restrict or object to processing, request portability, and withdraw consent where processing is based on it. Write to privacy@aireceipt.eu and we will respond within one month. You may also lodge a complaint with your national supervisory authority (in Portugal, the CNPD).

We use only strictly necessary storage for sign-in and drafting; details are in our Cookie Notice. Paddle sets its own cookies within the checkout it operates.

We update this notice when our processing changes. The date at the top always reflects the current version.