Data Controls 數據控制

Last updated: 2026-10-29

This page summarises what ThatReceipt stores, where it lives, and what you can do about it. The full legal wording is in our Privacy Policy.

English

• Google Drive (drive.file only). If you connect Google Drive, receipt photos are saved to a ThatReceipt folder in your Google account. We use the drive.file scope only: the app can read and write files it created — not the rest of your Drive.
• Scan & upload images. Photos you scan or upload on the site are sent to our servers only to run OCR and field extraction. They are not stored on our servers after processing (unless the Business opt-in below applies).
• Email attachments (≤7 days). When you forward a receipt by email, the attachment cannot be written to your Drive until you next open the app in a browser (Drive permission lives there). Attachments are held in private, non-public storage for at most 7 days, then moved into your Drive when you open the app or automatically deleted after 7 days.
• Expense records (text only). Saved fields — date, merchant, category, amount, notes — are stored in our database (Firestore) so you can view, search, and export them. You can delete any record at any time.
• Automated processing. Images are processed by Google Gemini to extract text. Images are not used to train models.
• Payments. Subscriptions and top-ups are handled by Stripe. We do not store your card details.
• Revoke Google access. In your Google Account permissions, remove ThatReceipt to disconnect Drive and sign-in access. You can still export records before deleting your account data.
• Export & delete. Export all records to Excel, CSV, or PDF from the app at any time. Deleting a record removes its database entry immediately. Photos already in your Drive stay in your Drive unless you delete them there.
• Business plan exception (opt-in). A company on the Business plan may choose (explicit opt-in by the company master) to store members' receipt photos on ThatReceipt servers instead of each member's Google Drive, so master and accountant roles can view them. Those photos live in private, non-public storage, are visible only to that company's members by role, and are deleted when the record is deleted.

繁體中文

• Google Drive（僅 drive.file）。 連接 Google Drive 後，收據相片會存入你 Google 帳戶內的 ThatReceipt 資料夾。我們只使用 drive.file 權限：應用程式只能存取它自己建立的檔案，無法讀取你 Drive 的其他內容。
• 掃描／上載圖片。 你在網站掃描或上載的相片只會傳到伺服器做 OCR 同欄位抽取，處理完成後不會儲存在我們的伺服器（除非下面商業版選項）。
• 電郵附件（最多 7 日）。 以電郵轉發收據時，附件要等你下次喺瀏覽器開啟應用程式先可以寫入 Drive。附件會暫存於非公開儲存空間，最長 7 日；你開 app 時會移入你自己嘅 Drive，否則 7 日後自動刪除。
• 支出記錄（只存文字）。 已儲存的日期、商戶、類別、金額、備註等文字欄位會存於我們的資料庫（Firestore），方便查閱、搜尋同匯出。你可隨時刪除任何一筆記錄。
• 自動處理。 圖片由 Google Gemini 抽取文字，不會用於訓練模型。
• 付款。 訂閱同增值由 Stripe 處理，我們不會儲存你的信用卡資料。
• 撤銷 Google 授權。 喺 Google 帳戶權限 移除 ThatReceipt，即可中斷 Drive 同登入存取。刪除帳戶資料前仍可先匯出記錄。
• 匯出同刪除。 可隨時喺 app 將全部記錄匯出為 Excel、CSV 或 PDF。刪除記錄會即時移除資料庫項目；已在你 Drive 的相片仍由你喺 Drive 自行管理。
• 商業版例外（需明確開啟）。 商業版公司可由管理員明確選擇，將成員收據相片改存於 ThatReceipt 伺服器（而非各成員 Drive），方便管理員同會計查看。相片存於非公開空間，只限該公司成員按角色可見，刪除記錄時一併刪除相片。

詳細條款請參閱 私隱政策。