Privacy Policy

Receivo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing platform at receivo.cloud and any related services.

Personal Information

When you create an account or use our services, we may collect:

• Name and email address
• Business name, address, and phone number
• Payment and billing information (processed securely via Stripe)
• Invoice data including client details, amounts, and descriptions
• Profile information and preferences

Automatically Collected Information

• Device information (browser type, operating system)
• IP address and approximate location
• Usage data (pages visited, features used, timestamps)
• Cookies and similar tracking technologies

We use the information we collect to:

• Provide, maintain, and improve our invoicing platform
• Process payments and manage subscriptions
• Send invoices, reminders, and notifications on your behalf
• Communicate with you about your account and our services
• Detect, prevent, and address fraud or security issues
• Comply with legal obligations

We may share your information with:

• Stripe — for payment processing and subscription management
• Supabase — for authentication and data storage
• Email providers — for sending transactional emails
• AI providers (Anthropic, OpenAI, Google): only when you use an AI feature, such as reading an uploaded invoice or drafting a follow-up message. The content needed for that task is sent to the provider to produce the result. If you add your own AI provider key, the request goes to the provider you chose, under your account with them.

We do not sell your personal information to third parties. We only share data as necessary to provide our services or as required by law.

You can connect your Receivo account to an AI assistant such as Claude (by Anthropic) or ChatGPT (by OpenAI), so you can ask it about your invoices or have it prepare work for you. This is optional and off by default. A connection only exists after you start it from the assistant and approve it on Receivo's own consent screen while signed in.

What a connected assistant can access

• Read access (always included): your invoices, your clients (name, email, phone, company, address and notes), your overdue invoices, and a revenue summary.
• Create access (only if you tick "Also let it create things for you"): adding new clients and creating new invoices as drafts.
• A connected assistant cannot send invoices, email your clients, take or move payments, change your billing, or delete anything. Invoices it creates stay as drafts until you review and send them yourself.
• It only ever sees your own account, with the same permissions you have when you sign in. Free plan limits apply exactly as they do in the app.

What is shared with the AI provider

When the assistant uses Receivo on your behalf, the information it asked for (for example, a list of your overdue invoices) is sent to that assistant so it can answer you. From then on, that information is handled by the provider under its own privacy policy and your settings with them. See the Anthropic privacy policy and the OpenAI privacy policy. We do not use data from AI connections to train AI models, and we do not sell it.

What Receivo keeps about a connection

• Which assistant is connected, the access you approved, and when it was created and last used, so you can see and manage it.
• The access tokens we issue to the assistant are stored only as one-way hashes. Access tokens expire after one hour and are renewed automatically while the connection is active.
• A technical log of each request: the time, the name of the action used (for example, "list invoices") and whether it succeeded. We do not log the content of your invoices or clients, or what you typed to the assistant.

Disconnecting

You can disconnect at any time in Receivo under Settings → AI Connections. This cuts off access immediately. The assistant may still show Receivo as connected until it next tries to use it, but every request after you disconnect is refused. You can also remove Receivo from within the assistant. Deleting your Receivo account also deletes its AI connection records.

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), secure authentication, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time through your account settings.

Depending on your location, you may have the right to:

• Access and receive a copy of your personal data
• Rectify inaccurate or incomplete data
• Request deletion of your personal data
• Restrict or object to processing of your data
• Data portability (export your data)
• Withdraw consent at any time

We use essential cookies to maintain your session and preferences. We do not use third-party advertising cookies. You can control cookie settings through your browser preferences.

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.

If you have any questions about this Privacy Policy, please contact us at info@receivo.cloud.