Privacy Policy

This policy applies to information we collect directly from you, automatically when you use the Service, and from providers that help us operate hosting, analytics, payments, subscriptions, support, and security. It does not apply to third-party websites or payment services that operate under their own privacy policies.

We may collect information you choose to provide, including:

• Account information, such as your name, email address, and authentication credentials. Passwords are stored in hashed form.
• Support communications and information you include when contacting us.
• Billing context, subscription status, plan information, and transaction identifiers received from our payment provider.
• Logos, template inputs, receipt fields, project settings, and other content you enter, upload, generate, or save.

We may also collect technical and usage information automatically, including IP address, page views, clicks, feature usage, downloads, browser and device information, referring pages, campaign information, approximate session activity, error data, and similar operational telemetry.

When you use a template, builder, generator, save feature, or export tool, we process the content you enter or generate. This may include business or merchant names, customer details, line items, prices, taxes, logos, notes, dates, payment descriptions, and project settings.

Depending on the feature and whether you are signed in, receipt and project data may be stored in browser storage on your device, in our systems, or both. Basic drafts may remain in your browser, while projects or export records that you explicitly save to an account may be stored with that account.

You control what you enter and are responsible for deciding whether it is appropriate to submit. Please avoid entering full payment-card numbers, government identifiers, health information, account passwords, or other highly sensitive data.

We use information to:

• Operate the Service and provide template editing, project saving, account access, downloads, and exports.
• Create and maintain accounts and manage subscriptions and paid access.
• Respond to support requests, send service or billing notices, and communicate about the Service.
• Troubleshoot errors, monitor performance, understand product usage, and improve features.
• Protect the Service and its users, prevent abuse and fraud, and enforce our Terms.
• Comply with legal, accounting, and regulatory obligations.

Where permitted, we may send product news or promotional communications. You can opt out of non-essential marketing messages using the unsubscribe method provided in the message or by contacting us.

We use cookies and similar technologies to maintain authentication and session state, remember settings, support drafts and saved work, measure product usage, attribute visits, and improve performance. Local storage and session storage may hold encrypted draft data, preferences, authentication-related state, checkout attribution, or analytics-session information.

Our analytics and infrastructure stack may include Google Tag Manager, Microsoft Clarity, Cloudflare analytics, and similar providers. Depending on their configuration, these tools may receive usage events, device and browser information, referral data, approximate location derived from IP address, and diagnostic or session-interaction data. Sensitive receipt-preview areas may be masked from session analytics where supported.

You can manage cookies through your browser and through consent controls where available. Blocking cookies or browser storage may prevent sign-in, saved drafts, checkout, analytics preferences, or other parts of the Service from working correctly.

Payments are processed by Paddle or another payment provider disclosed at checkout. The provider, rather than GenerateMyReceipt, collects and processes your full payment-card details under its own privacy notice and terms.

We may receive and store the information needed to provide paid access and support, such as customer and subscription identifiers, plan, subscription status, billing period, transaction information, and limited billing metadata. We do not store your full payment-card number.

We do not sell your personal information for money. We may share information with service providers that perform hosting, data storage, analytics, payment and subscription management, communications, support, security, fraud prevention, and other infrastructure services for us.

We may also disclose information when reasonably necessary to comply with law or legal process, enforce our Terms, investigate abuse or fraud, protect the rights and safety of users or the public, defend our rights or property, or complete a merger, acquisition, financing, reorganization, or sale of assets subject to appropriate protections.

We retain information for as long as reasonably necessary to provide the Service, maintain accounts, fulfill the purpose for which it was collected, comply with legal or accounting duties, resolve disputes, enforce agreements, and protect the platform. Retention periods vary by data type and feature.

Data stored only in your browser remains under your control and can generally be removed using the Service's controls or your browser settings. Deleting an account or saved project may not immediately remove copies from backups, security logs, payment-provider records, or records we must retain by law.

We use administrative, technical, and organizational measures designed to protect information, including HTTPS, access controls, password hashing, and safeguards provided by our hosting and payment providers. No transmission or storage method is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to request access to, correction of, deletion of, or restriction of certain personal information. You may also have the right to object to processing, request data portability, withdraw consent, or receive information about categories of data we collect and disclose.

To make a request, email [email protected] with "Privacy request" in the subject line. We may need to verify your identity before completing a request, and we may retain information where permitted or required by law. You may also manage browser storage, cookies, marketing preferences, saved projects, and account information using available product or browser controls.

The Service is not directed to children under 16, and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact us so we can review and address the issue.

We and our service providers may process information in countries other than the one where you live. Where applicable law requires it, we use recognized safeguards for international transfers of personal information.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date on this page and may provide additional notice for material changes. The updated policy applies when it becomes effective.

For questions, concerns, or requests about this Privacy Policy or our handling of personal information, email [email protected].