Privacy and your data

What we keep

• The invoice files you forward, photograph or upload.
• The lines we read from each invoice: items, prices, quantities, account numbers and delivery addresses. Some invoices also name your supplier's rep.
• Your price history, built from those lines, so we can compare each new price with what you paid before.
• When you forward an email, its invoice attachments, or the message itself when nothing usable is attached, along with details about the email such as who sent it and when.
• Your contact details and the email address you sign in with.
• If you pay us, your Stripe customer and subscription IDs, your plan's status and when your current billing period ends. Stripe holds your card details, and we never see your card number.
• A log of changes to your account, such as corrections, changes to an issue's status, the emails we send you and payment updates from Stripe.
• For each invoice Anthropic reads for us, the reply it gave, so we can check how it was read.

Who can see it

Each restaurant's data is kept apart. When you sign in, you see only your own restaurants.

People on our team look at an invoice when our software is not sure it read it correctly. During the pilot, a person on our team also checks every weekly report before it is sent.

People on our team can also see your restaurant's data in our staff tools, for example to set up your account, check mail that is waiting or fix a problem.

We never contact your suppliers. When you dispute a price, we write a draft and you send it from your own email.

How we keep it safe

• Your invoice files are kept in private storage and open only through links that expire after a short time.
• Your data is encrypted while it travels over the internet and while it is stored.
• You sign in with a link we email you. The link expires after an hour, and there are no passwords.
• Each restaurant has its own hard-to-guess forwarding address. Mail from a sender we have not yet approved for your restaurant waits until someone on our team checks it.

No training on your data

Anthropic reads invoices for us so we can pull out the lines. We use Anthropic's API on a tier that does not train on customer data, so your invoices are not used to train its models.

Who helps us run the service

We use these companies to run the service:

Supabase

Stores your account details, invoice lines and invoice files, and handles sign-in.

Render

Runs our app, including this website.

Postmark

Receives the invoices you forward to us and sends our emails to you.

Anthropic

Reads invoices for us so we can pull out their lines. We use its API on a tier that does not train on customer data.

Inngest

Runs our background work, such as reading new invoices and sending your weekly report. For this it holds some of your data, such as your weekly report email and the addresses we send it to, but never your invoice files.

Stripe

Handles payments. Stripe holds your card details, and we never see your card number.

Sentry

Receives a report when something in our app breaks, so we can fix it. Its default collection of personal details is turned off.

Keeping and deleting your data

We keep your invoices and price history so we can compare each new invoice with what you paid before.

You can ask us to delete your data at any time. We delete it within 30 days of your request, including the invoice files we stored.

Questions

Loading our email address...