Privacy Policy
Last updated: March 2026
This policy explains what data we collect, how we use it, and your rights. We keep it short and plain.
1. Data We Collect
- Account info: name and email address when you register
- Uploaded files: receipt images and PDFs you submit for extraction
- Extracted text: the OCR output stored in your history
- Usage data: credit balance, transaction history, and extraction timestamps
- Payment data: handled entirely by Stripe or Midtrans. We never see your card number or bank details
2. How We Use It
We use your data only to provide the service:
- To process your receipt files and return extraction results
- To manage your account, credits, and transaction history
- To send transactional emails (email verification, password reset)
We do not sell your data. We do not use your receipt contents for advertising or model training.
3. Third-Party Services
We use the following processors to deliver the service:
- Mistral AI: receives your uploaded files for OCR processing
- Stripe: handles card payments, subject to Stripe's Privacy Policy
- Midtrans: handles IDR payments (QRIS, bank transfer)
- Google: optional OAuth sign-in, subject to Google's Privacy Policy
4. Data Storage & Retention
Your files and extracted text are stored on our servers for as long as you keep the result in your history. Deleting a result permanently removes the file from our servers. Your account data is retained until you delete your account.
5. Your Rights
You can:
- Delete individual results from your history at any time
- Request full account deletion by emailing us
- Ask what data we hold about you
6. Cookies
We use a session cookie to keep you logged in. No third-party tracking cookies are set. If Google Analytics is enabled in the future, this policy will be updated to reflect that.
7. Changes
We may update this policy. We will notify you by email for material changes. Continued use of the service constitutes acceptance.
Privacy questions? Email support@notafy.id