Privacy Policy for Letscan

2. Information We Collect

We collect the following types of data:

• Receipt Data: Images, transaction details, merchant information, and categories for analytics.
• User Account Data: Name, email, and account credentials (if applicable).
• Device & Usage Data: Logs, app interactions, and IP addresses for security and performance.

We do not store payment card details or financial credentials.

3. How We Use Your Data

Your data is used strictly for:

• Storing and categorizing receipts for easy access
• Providing spending insights and analytics
• Helping with GST/HST tax rebate tracking
• Improving app functionality and user experience
• Training and improving our AI models

Use of Data for AI Training

By using Letscan, you acknowledge and consent that we will retain anonymized receipt data (such as merchant names, purchase categories, and total amounts), and redacted copies of receipt images from which names, addresses, card numbers and other identifying details have been automatically removed, to improve our artificial intelligence (AI) models. These models are essential to our service as they:

• Enhance receipt processing accuracy
• Improve categorization of expenses
• Provide better financial insights
• Help develop new features and capabilities

Important Information about AI Processing:

• AI processing is a core part of our service and cannot be opted out of
• We do not use personally identifiable information (e.g., names, emails, payment details) for AI training
• All data used for AI training is anonymized and encrypted
• Retained data helps improve the service for all users

Please Note: The use of anonymized data for AI training is mandatory and integral to our service. By using Letscan, you agree to this data usage. If you do not agree, you should not use our service.

We do not sell or share your personal data with third parties for advertising purposes.

4. Data Retention & Deletion

Deleting Your Account

• You can delete individual receipts at any time in the app.
• You can delete your account from the app. We ask for your password to confirm it is you.
• Access to any connected inbox is revoked immediately, and your receipts and personal data are permanently deleted after 30 days.
• During those 30 days you can cancel by signing in again, or by using the link in the email we send you. We keep this delay so that a lost or stolen phone cannot be used to erase your records.

After 30 days we delete your receipts and receipt images, your account details, your categories and rules, and the records linking you to any email we processed. What remains is a record that an account existed and was deleted, with nothing that identifies you. Backups are kept for up to 30 days and are then overwritten.

What We Keep

• Receipts are stored securely until you delete them or close your account.
• After your account is deleted, we keep copies of receipt images that have been automatically redacted to remove names, addresses, card numbers and other identifying details. These copies are not linked to you or to any account, and the records that connected them to you are destroyed with your account. We use them only to improve the accuracy of our receipt-reading models.
• Receipts from a connected Gmail inbox are never kept for this purpose and are deleted in full.
• We may need to keep limited records where the law requires it, such as records of payments.

5. Data Security

We implement strict security measures, including:

• Encryption: Receipt images and data are encrypted in storage and transmission.
• Access Controls: Our staff cannot browse your receipts. A receipt image is opened only when you report a problem with it and ask us to look, or where the law requires it. Every such view is recorded, including who opened it and when.
• Regular Audits: We monitor systems for security vulnerabilities.

However, no system is 100% secure, and we cannot guarantee absolute protection.

6. Your Rights

As a Canadian user, you have the right to:

• Access and download your stored receipt data.
• Request corrections to inaccurate data.
• Delete your account and all associated data.

To exercise your rights, contact us at: talktous@netzarlabs.com

7. Service Providers

To run Letscan we share data with a small number of providers, only so they can perform a service for us. They may not use it for their own purposes, and we require that your data is not used to train their models.

• Receipt reading — artificial-intelligence providers read your receipt images and receipt emails to extract the merchant, date, amounts and items.
• Storage — cloud storage and database providers hold your receipt images and account data.
• Email — providers receive the receipts you forward to us, convert emailed receipts into viewable images, and deliver the emails we send you.
• Payments — a payment processor handles subscriptions. We never see or store your card details.
• Analytics and notifications — providers deliver push notifications, which may include a merchant name, and measure how the app is used. We do not send receipt contents to our analytics provider.

We do not sell your data, and we do not share it for advertising. We can tell you which providers we currently use if you ask: talktous@netzarlabs.com.

Letscan is operated from Canada, and your data is stored on servers located outside Canada, including in Ireland and the United States. By using Letscan you consent to this transfer. Wherever it is stored, your data remains protected by this policy and by our agreements with these providers.

8. Legal Compliance & Disclaimer

Letscan does not provide financial, legal, or tax advice. All tax-related insights are for informational purposes only, and users should consult a professional before making financial decisions.

We comply with PIPEDA (Canada's privacy law) and applicable regulations.

9. Changes to This Policy

We may update this policy periodically. Changes will be posted in-app and on our website. Continued use of the app means you accept the updated policy.

10. Contact Us

If you have questions or concerns, contact us at: talktous@netzarlabs.com

11. Monthly Draw

If you take part in the monthly draw, we process your receipt counts to compute your entries and, if you win, your name and email address to notify you and deliver the prize. Your most-scanned merchant that month may be used to choose the gift card. Draw records are retained as long as required for legal and accounting purposes.

Winners' first name and the first initial of their last name may be shown in the app. You can opt out at any time by contacting talktous@netzarlabs.com.

See the Contest Rules for the full terms of the draw.

12. Email Receipts and Connected Inboxes

You can add receipts by email. When you forward an email to your Letscan scan address, or set up a forwarding rule in your email provider, we process the forwarded message and its attachments to create a receipt. We act only on messages sent to us from addresses you have verified.

You can also choose to connect a Gmail inbox. If you do, Letscan receives read-only access and uses it for one purpose: finding purchase receipts and invoices in your mail and adding them to your account. Messages are checked automatically. Emails that are not receipts are discarded immediately and are never stored. Emails identified as receipts are processed, with the help of a service provider that extracts the text on our behalf, exactly as a forwarded receipt would be.

Letscan's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Gmail data for advertising, we do not sell it, we do not allow people to read it except with your consent, for security purposes, or to comply with the law, and we do not use it to develop or train generalized artificial intelligence models. The AI improvement described in section 3 does not apply to information obtained from a connected inbox.

Google API Services User Data Policy

You can disconnect an inbox at any time in the app under Settings, Connected emails. Disconnecting immediately stops our access, revokes our authorization with Google, and deletes the stored credentials, which are kept encrypted while the connection is active. Receipts already added to your account stay there until you delete them or delete your account.