Privacy Policy

Effective Date: July 5, 2025 · Last Updated: July 5, 2025

LEO ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and manage your data when you use the LEO Receipt Processor.

1. Information We Collect

This app does not require an account, login, or any registration. We collect only the data you provide during a processing session:

• Staff / Folder Name: A name you enter to label the output files and generate reference numbers. This is not linked to any account or identity.
• Uploaded Files: Receipt images and PDFs you upload for processing (JPG, PNG, WEBP, PDF, BMP, TIFF).
• Output Preferences: Your chosen output format (Excel or CSV) and custom column labels.
• Server Logs: Standard web server logs including IP address, browser type, and request timestamps. These are used for debugging and are not linked to individual users.

We do not collect email addresses, passwords, payment information, or any other personal identifiers.

2. How We Use Your Data

Your data is used solely to:

• Send uploaded receipt images and extracted PDF text to Google Gemini for AI-powered data extraction (date, payee, amount, item details)
• Generate an organised spreadsheet (Excel or CSV) with extracted transaction data
• Rename and package your receipt files into a downloadable ZIP archive

We do not sell, trade, or share your data for marketing or advertising purposes.

3. Data Storage and Retention

• Temporary storage only: All uploaded files and generated outputs are automatically and permanently deleted 10 minutes after processing is complete.
• Local server storage: Files are temporarily stored on Replit servers during processing.
• Cloud storage: Generated output files (ZIP and spreadsheet) are temporarily uploaded to Replit Object Storage to enable reliable downloads. These are also deleted after 10 minutes.
• No long-term retention: We do not retain any of your files, receipts, or extracted data beyond the 10-minute window. There is no database, no user profiles, and no processing history.

4. Third-Party Data Sharing

• Google Gemini: Receipt images and extracted PDF text are sent to Google's Gemini API for AI-powered data extraction. Google may process this data in accordance with their own privacy policy and terms of service.
• Replit: The app is hosted on Replit's infrastructure. Uploaded files are temporarily stored on Replit servers and Replit Object Storage.
• We do not control how these third-party providers handle data once it is transmitted to them. Please refer to their respective privacy policies for more information.

5. AI Extraction Disclaimer

The AI-powered data extraction is provided for convenience and may not be fully accurate. Extracted dates, amounts, payee names, and item descriptions should always be reviewed before use in official records or accounting systems. We are not responsible for errors in AI-extracted data.

6. Security

We implement reasonable security measures including automatic file deletion and temporary-only storage. However, we cannot guarantee 100% security due to the nature of the internet and our reliance on third-party infrastructure. Do not upload files containing highly sensitive information (e.g., passwords, bank account numbers, personal identification numbers) beyond what is normally found on a receipt or invoice.

7. Cookies and Tracking

This app does not use tracking cookies, analytics services, or advertising pixels. A minimal session cookie may be set by the web framework for technical purposes only.

8. Children's Privacy

This app is not intended for children under 13. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page. Continued use of the app after updates constitutes acceptance of the revised policy.