Privacy Policy

SlipInbox runs SlipInbox. This policy explains what personal data we handle, why, and what you can do about it.

For receipts and contacts, the organization that uses SlipInbox decides what goes in, and we process it on its behalf. For accounts and for running the service itself, we decide, and we are responsible for that data.

• Account details: your name, email address and password (stored only in scrambled form), your role, and when you accepted our terms.
• Organization details: its name, timezone, categories, merchants and team.
• Receipts: the photos, PDFs and receipt emails you upload or forward, what is read from them (such as merchant, date, amounts, VAT, receipt number, tax number and line items) and any changes or notes you add. Receipts can show names, card digits or other details about the people on them.
• Forwarded email: the sender’s address, the subject, the message and its attachments. If a message links to a receipt, we may open the link to fetch it.
• Contacts: the names and email addresses your organization adds for people who send receipts without an account.
• Technical data: sign-in records, a history of changes made to receipts, and error reports when something breaks.

We use this data to:

• run SlipInbox: sign you in, read receipts, show them to your team and produce exports;
• decide which forwarded mail to process and which to hold;
• keep the service secure, prevent abuse and fix problems;
• improve how well receipts are read;
• send you the emails the service needs, such as invites and password resets;
• meet our legal obligations.

We do not sell personal data, use it for advertising or send marketing to the people who send receipts.

Receipts are read by automated text recognition and AI models run for us by service providers. They process a receipt only to read it for you. We do not let them use your receipts to train their own models. Reading proposes values; people in your organization check and correct them, and no decision about a person is made from it alone.

We share personal data only with:

• people in your organization, according to their role;
• service providers that host the app and its data, read receipts, deliver and receive email and report errors, each bound to use it only for us;
• a small number of SlipInbox staff, who can see an organization’s data to support it and fix problems. Every staff action is recorded;
• authorities, when the law requires it, or to protect people from harm or fraud;
• a buyer or successor, if SlipInbox is sold or merged, under this same policy.

Our service providers may store and process data in other countries, including outside your own. When they do, we rely on their contractual commitments to protect it to the standard this policy describes.

We keep receipts and their files for as long as your organization uses SlipInbox, so you can meet your own record-keeping duties. When an owner deletes a receipt, its files are removed from storage.

Held mail from an unknown sender is deleted when an admin rejects or blocks the sender. When an organization is closed, we delete its data, apart from what the law requires us to keep and short-lived backups that expire on their own.

You can see and correct your organization’s receipts in the workspace and export them at any time. Depending on where you live, you may also have the right to access, correct, delete or move your personal data, or to object to how we use it.

Write to hello@slipinbox.com to use these rights. If you sent receipts to an organization, we may pass your request to that organization, since it decides what happens to them. You can also complain to your data protection authority.

We use only the cookies and browser storage SlipInbox needs: one to keep you signed in and one to remember whether you chose the light or dark look. There are no advertising or tracking cookies.

Data is encrypted in transit, access is limited by organization and role, and staff access is recorded. No service is perfectly secure, so use a strong password, and tell us at hello@slipinbox.com if you suspect a problem.

SlipInbox is for businesses and is not meant for children. We do not knowingly collect their data.

We may update this policy. When a change matters, we will tell owners by email or in the workspace before it applies. The date at the top shows when it last changed.

Questions or requests about your data: hello@slipinbox.com.