Privacy policy

• Your account: your name, email address and, if you sign in with Google, your Google profile picture.
• Your receipts: the photos and PDFs you add, and what's printed on them: the business, its address, the date, amounts, taxes, items and the payment method. Only the last 4 digits of a card are kept; full card numbers are never stored.
• What you add: corrections, categories, tags, collections and settings.
• Team details (business workspaces): who belongs to the business and their role.
• Technical details: a sign-in cookie, and the IP address and browser of each signed-in session, to keep your account secure.

Photos are cleaned before they're stored: location (GPS) and device details are removed from the copy we read. The original stays exactly as you took it, because it's your proof.

• To read your receipts, check their math and Canadian taxes, and let you review, correct, export and print them.
• To keep copies where you choose (your computer folder, and Google Drive or Dropbox when you connect them).
• To sign you in, send sign-in links and invitations, and keep your account secure.
• To measure and improve how accurately receipts are read. Business names and categories (never amounts, dates or who you are) may help suggest categories for everyone.

We don't sell your information, show ads, or use your receipts to train AI models.

To read a receipt, its photo or PDF is sent to Anthropic's Claude service in the United States. Anthropic doesn't use it to train its models. You always see what was read and can correct it before you confirm. Where it's offered, private mode reads receipts on your own device instead, so nothing is sent for reading.

The app runs in Montréal, Canada. Some of the services we rely on store or handle information outside Canada, mainly in the United States:

Information handled outside Canada is subject to the laws of those countries, and may be accessible to their authorities.

• Photos and PDFs stay in our storage for 13 months by default (you can choose another period). They're only removed once a checked copy is in your own storage. A small preview stays with us.
• Receipt details stay while you have an account, so your records are there at tax time. The CRA generally expects records to be kept for 6 years.
• Deleted receipts go to the trash and are removed for good, with their photos, after 30 days.
• A history of changes (who changed what, when) is kept as part of your records.

• See and take your information: export your receipts (Excel, CSV, audit PDFs); your copies are already in your own storage.
• Correct it: edit any receipt, or ask us.
• Delete it: delete receipts yourself, or ask us to delete your account. We'll delete your information, except what we must keep by law, and tell you what that is. A business's receipts belong to the business.
• Change your mind: disconnect Google Drive or Dropbox, or use private mode where offered.

If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Connections are encrypted, and our providers encrypt stored data. Every file has a fingerprint so copies can be checked; connections to Google Drive and Dropbox are stored encrypted; team members only see what their role allows; and changes are recorded. If a breach puts you at risk, we'll tell you and the Privacy Commissioner, as the law requires.

We use one cookie to keep you signed in, and your browser remembers a few display choices (like the theme). No advertising or tracking cookies.

ScanStudio is for adults (18 and over) and businesses.

If this policy changes in a way that matters, we'll tell you in the app before it takes effect. Questions, requests or concerns: our privacy officer, Dennis Guan, at privacy@scanstudio.ca.