✦ Last update ·

DRAFT — PENDING LEGAL REVIEW

This notice explains what RECEIPT collects when you forward receipts to us, why we need it and how long it stays. We keep only what it takes to check a purchase and pay the reward.

It is a working draft and will be reviewed by counsel before public launch.

1. Who we are

RECEIPT is an independent project run from France. For the personal data described here, RECEIPT is the data controller. The legal entity, its address and a contact for data protection requests will be published on this page before launch.

RECEIPT is not affiliated with Robinhood or with any company whose name or ticker appears on the site.

2. What we collect

Only what is needed to verify a receipt, credit it to the right account and send the reward.

WHAT YOU GIVE US

  • The email addresses you confirm with a one-time code

  • The country you declare when you sign up

  • Your wallet address, created at sign-in or connected by you

  • The notes you send us through the contact page or by email

WHAT WE KEEP FROM EACH RECEIPT

  • Brand, date, amount and currency

  • A hash of the order ID and of the message ID, so one order is never paid twice

  • The result of the DKIM signature check and the receipt's status

WHAT IS RECORDED AUTOMATICALLY

  • IP address and device details, used for rate limits and abuse checks

  • Basic usage events, only if you accept analytics cookies

3. Your inbox stays yours

We never sign in to your mailbox and we don't use the Gmail API. You create a forwarding filter in your own email settings, so you choose which senders reach us, and you can delete that filter whenever you like.

  • Each raw email is deleted minutes after it is processed

  • Mail from senders outside our brand registry is rejected on arrival

  • We never read, store or share the rest of your inbox

NO INBOX ACCESS. NO PASSWORD. NO API TOKEN.

4. Why we use it

Each use rests on a legal basis under the GDPR. The final mapping will be confirmed with counsel before launch.

  • Verify receipts and credit points, to perform our terms

  • Run the nightly close and send payouts to your wallet, to perform our terms

  • Block forged, reused or refunded receipts, our legitimate interest in stopping fraud

  • Check where you live, since Stock Tokens are not offered everywhere, a legal obligation

  • Measure how the site is used, only with your consent, which you can withdraw

5. Data on a public chain

Rewards are paid in Stock Tokens on Robinhood Chain, a public blockchain. Your wallet address and the transfers sent to it can be seen by anyone, and neither we nor anyone else can edit or erase them.

Your email address, your name and your receipts are never written on-chain.

6. Who else handles it

A few service providers process data on our behalf, under data processing agreements. Their names will be listed here before launch.

  • The inbound email service that receives forwarded receipts

  • Our hosting and database provider

  • Our sign-in and wallet provider

  • Error monitoring, and product analytics if you consent

We hand data to public authorities only when the law requires it.

7. How long we keep it

  • Raw emails: minutes, deleted right after processing

  • Receipt records and rewards: while your account is open, then only as long as accounting and anti-fraud duties require

  • Notes sent to us: as long as it takes to answer

The exact period for each category will be published here before launch.

8. Your rights

You can ask to see, correct, export or delete your data, object to a use, or withdraw a consent at any time. Write from an email you have confirmed with us so we know the request is yours. Deleting your account stops future rewards; transfers already on-chain stay public.

You can also complain to the CNIL, the French data protection authority, or to the authority where you live.

9. Cookies

Essential cookies keep you signed in and the site secure. Analytics cookies stay off until you accept them, and you can change that choice at any time.

10. Changes and contact

When this notice changes, the date at the top changes too, and signed-in users are told about anything important.

Email: hello@earnreceipt.com