Privacy Policy

Version 2 · Effective Aug 24, 2026 · Last updated Aug 24, 2026
1.
Introduction and scope - This Privacy Policy explains how Genuisys LLC dba Zap Receipt (“Zap Receipt,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you visit zapreceipt.com, create or use a Zap Receipt account, communicate with us, or otherwise use our website, applications, and services (collectively, the “Service”). This policy applies to personal information collected through the Service. It does not govern third-party services, websites, applications, or platforms that may be linked to or integrated with the Service; those services have their own policies. For purposes of applicable privacy laws, Zap Receipt is generally the “controller” or “business” for personal information we collect directly from individual users. If you use Zap Receipt through an organization that determines why and how your information is processed, that organization may be the controller or business and Zap Receipt may process certain information as its service provider or processor.
2.
Information we collect - The categories of information we collect depend on how you use the Service and the features you enable. A. Account and contact information. We may collect your name, email address, username, password or authentication credentials, company name, phone number, billing address, and preferences when you create or manage an account or contact us. B. Receipt, expense, and document information. We collect content you upload, submit, forward, import, or otherwise make available through the Service, including receipt and invoice images, PDFs, document metadata, expense descriptions, merchant names, dates, totals, taxes, categories, notes, attachments, mileage records, property or project labels, and reports. Receipts and related documents may contain personal or financial information, such as names, addresses, transaction data, partial payment-card information, loyalty identifiers, tax-related information, or other information you choose to submit. Do not submit sensitive information unless it is necessary for your intended use of the Service. C. Email inbox data, when you explicitly enable it If you connect an email inbox or authorize email forwarding, we may access and process the messages, attachments, metadata, and other information necessary to identify and import receipts or expense-related documents and to provide the feature you enabled. We use email inbox data only to provide and support the enabled receipt-import or expense-processing functionality, prevent abuse, maintain security, and comply with law. We do not use email inbox data for advertising, and we do not sell it. You can disconnect a connected inbox in your account settings, if available, or by contacting us. Disconnecting stops future access but does not automatically remove documents or data previously imported into Zap Receipt. D. Payment and transaction information If you purchase a subscription, our payment processor may collect payment-card, bank-account, billing, and transaction information. Zap Receipt may receive limited payment information, such as payment status, subscription plan, transaction identifiers, and billing history. We do not intend to store full payment-card numbers unless our payment provider and documented practices expressly state otherwise. E. Device, usage, and log information We automatically collect information about your interaction with the Service, such as IP address, browser type, device type, operating system, application version, language settings, referring URLs, approximate location inferred from IP address, session activity, pages or features used, actions taken, timestamps, error reports, and diagnostic logs. F. Cookies and similar technologies We and our service providers may use cookies, pixels, local storage, SDKs, and similar technologies to operate the Service, remember settings, maintain security, understand usage, measure performance, and, if you consent where required, support analytics or marketing. See the “Cookies and choices” section below for your options. G. Communications and support information We collect information you provide in support requests, survey responses, feedback, emails, chats, calls, and other communications with us. H. Information from third parties We may receive information from identity or authentication providers, payment processors, referral partners, analytics providers, security vendors, and Third-Party Services that you connect to Zap Receipt.
3.
How we use information - We may use personal information to:
•
Provide, operate, maintain, personalize, and improve the Service.
•
Create and administer accounts; authenticate users; and manage subscriptions.
•
Scan, extract, categorize, organize, store, track, export, and report on submitted documents and expense data.
•
Process payments and administer billing, credits, refunds, and account transactions.
•
Provide customer support, respond to requests, and communicate about the Service.
•
Send transactional, security, administrative, and service-related messages.
•
Send marketing communications where permitted by law and consistent with your preferences; you may opt out at any time.
•
Monitor performance, troubleshoot, conduct analytics, develop features, and improve user experience.
•
Detect, investigate, prevent, and address fraud, abuse, security incidents, technical issues, and violations of our Terms.
•
Comply with legal obligations, enforce agreements, establish or defend legal claims, and protect the rights, safety, and property of Zap Receipt, users, and others.
•
Create aggregated, de-identified, or anonymized information that does not reasonably identify you. We may use and disclose that information for lawful business purposes.
AI and automated processing. We may use automated systems, including OCR, machine learning, and AI services, to process Customer Content and generate suggested extracted fields, categories, classifications, and reports. Automated outputs can be inaccurate and should be reviewed by you.
4.
Legal bases for processing - If privacy laws such as the EU or UK General Data Protection Regulation apply, we process personal information on one or more of the following bases:
•
To perform a contract with you or take steps at your request before entering into a contract.
•
With your consent, where consent is required or appropriate.
•
For our legitimate interests, such as operating, securing, improving, and marketing the Service, where those interests are not overridden by your rights.
•
To comply with legal obligations.
•
To protect vital interests or to establish, exercise, or defend legal claims where permitted by law.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that occurred before withdrawal or processing based on another lawful basis.
5.
How we disclose information - We may disclose personal information to the following categories of recipients:
•
Service providers and processors. Vendors that provide hosting, cloud storage, database services, document-processing or AI services, email delivery, customer support, analytics, security, monitoring, payment processing, and similar services on our behalf.
•
Third-Party Services you choose to connect. If you request an export, integration, or connection, we may disclose information necessary to provide that feature according to your instructions.
•
Authorized users and organization administrators. If your account is administered by an organization, authorized administrators may be able to access and manage account and Customer Content associated with that organization.
•
Professional advisers and corporate affiliates. Lawyers, accountants, auditors, insurers, and affiliated entities when reasonably necessary for business operations or legal purposes.
•
Business transfers. A buyer, investor, lender, successor, or other participant in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets.
•
Government authorities and other parties for legal and safety reasons. When we believe disclosure is required or appropriate to comply with law, a subpoena, court order, legal process, or governmental request; enforce our rights; investigate fraud or security incidents; or protect the safety, rights, and property of Zap Receipt, our users, or others.
•
With your consent or at your direction. For any other purpose disclosed to you at the time of collection or with your consent.
6.
Data retention and deletion - We retain personal information for as long as reasonably necessary to provide the Service, maintain our business records, comply with law, resolve disputes, enforce agreements, and protect our systems and users. Retention periods vary based on the type of data, the purpose of processing, user settings, legal requirements, and operational needs. For example:
•
Account and Customer Content may be retained while your account remains active and for a reasonable period afterward to allow recovery, export, security review, or compliance.
•
Billing and transaction records may be retained for legally required accounting and tax periods.
•
Security, diagnostic, and access logs may be retained for a limited period appropriate for security and operations.
•
Information may remain in backups for a limited period before being overwritten or deleted.
You may delete documents or request deletion of your account the user settings page. Deletion from active systems may not immediately remove data from backups, logs, or records we must retain for legal, security, fraud-prevention, or legitimate business reasons. We will delete or de-identify data when it is no longer needed, subject to those exceptions.
7.
Security - We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. These measures may include encryption in transit, access controls, authentication controls, logging, monitoring, least-privilege practices, vendor assessments, and secure-development practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for using strong credentials, protecting your account, maintaining the security of connected services, and promptly notifying us of suspected unauthorized use.
8.
Cookies and choices - You can usually control cookies through your browser settings. Blocking or deleting cookies may affect Service functionality.
9.
Your privacy rights - Depending on where you live and subject to applicable law, you may have rights to:
•
Know or access the personal information we hold about you.
•
Receive a portable copy of certain personal information.
•
Correct inaccurate personal information.
•
Delete personal information, subject to legal exceptions.
•
Restrict or object to certain processing.
•
Withdraw consent where processing is based on consent.
•
Opt out of certain targeted advertising, sale, sharing, profiling, or other processing where applicable.
•
Appeal a decision concerning a privacy-rights request, where applicable.
To exercise a right, submit a request through support@mail.zapreceipt.com with “Privacy Request” in the subject line. We may verify your identity and authority before acting on a request. You may use an authorized agent where permitted by law, subject to verification of the agent’s authority.
10.
U.S. state privacy disclosures - This section supplements the rest of this Privacy Policy for residents of U.S. states with applicable privacy laws, including California, Colorado, Connecticut, Virginia, Utah, and others as applicable. In the preceding 12 months, we may have collected the following categories of personal information, depending on how you use the Service:
•
Identifiers, such as name, email address, account identifier, IP address, and device identifiers.
•
Commercial and transaction information, such as subscription, billing, receipt, invoice, and expense-related information.
•
Internet, device, and network activity, such as usage logs, browser, device, and interaction information.
•
Approximate geolocation inferred from IP address.
•
Audio, electronic, visual, or similar information, such as receipt images, PDFs, attachments, and support communications.
•
Professional or employment-related information, if you provide it in account, receipt, or support content.
•
Inferences generated from the preceding data, such as expense categories or merchant classifications.
•
Sensitive personal information that may appear incidentally in documents you choose to upload. We do not seek to use sensitive personal information to infer characteristics about you, except as necessary to provide the requested Service, protect security, or as otherwise permitted by law.
We collect these categories from you, your authorized users, your device or browser, connected Third-Party Services, payment processors, and service providers. We use and disclose them for the purposes and to the categories of recipients described in Sections 3 and 5. Sale, sharing, and targeted advertising Select and publish only the statement that matches your actual practices. Zap Receipt does not sell personal information or share personal information for cross-context behavioral advertising.
California-specific rights - California residents may have the rights described above, including rights to know, delete, correct, and opt out of sale or sharing. We will not discriminate against you for exercising privacy rights. California residents may designate an authorized agent, subject to verification.
11.
International transfers - Zap Receipt may process personal information in the United States and other countries where we, our affiliates, or service providers operate. Those countries may have data-protection laws that differ from the laws of your location. Where required, we will use appropriate safeguards for international transfers, such as contractual protections, adequacy decisions, or other transfer mechanisms recognized by applicable law.
12.
Children’s privacy - The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18.
13.
Third-party links and services - The Service may link to or integrate with Third-Party Services. We are not responsible for the privacy, security, content, or practices of third parties. Review the privacy policies and terms of every Third-Party Service before connecting an account or submitting information.
14.
Changes to this Privacy Policy - We may update this Privacy Policy from time to time. We will post the updated policy and revise the “Last updated” date. If changes are material, we will provide additional notice where required by law, such as through the Service or by email. Your continued use after the effective date of the revised policy is subject to the revised policy to the extent permitted by law.
15.
Contact us - For questions, concerns, or requests about this Privacy Policy or our data practices, contact: support@mail.zapreceipt.com. If you appoint a data protection officer, EU representative, or UK representative, add their required contact details here.
Read the Terms of Service