Privacy Policy

Creo Tech LLC ("we", "our", or "us") operates Reconifi, a receipt reconciliation service available at reconifi.ai (the "Service"). This Privacy Policy explains how we collect, use, and protect information when you use our Service.

1. Information We Collect

1.1 Information You Provide

When you use our Service, you upload:

• Bank transaction CSV files containing transaction dates, amounts, and merchant descriptions
• Receipt images (photos or scanned documents)

1.2 Payment Information

Payment processing is handled by Stripe. We do not store your credit card information. Stripe collects payment details including card number, expiration date, and billing address. Please review Stripe's Privacy Policy at https://stripe.com/privacy.

1.3 Automatically Collected Information

We automatically collect standard web log information including IP addresses, browser type, and access times through standard web server logs.

2. How We Use Your Information

We use the information you provide to:

• Process your uploaded files and match transactions to receipts using OCR technology
• Generate and deliver reconciliation reports
• Process payments for our Service
• Improve our Service and develop new features
• Comply with legal obligations

3. Third-Party Services

We share your information with the following third-party service providers:

• Veryfi: OCR and receipt data extraction
• Stripe: Payment processing
• OpenAI: AI-powered merchant name matching (optional)
• Anthropic: AI-powered merchant name matching fallback (optional)
• Google: Advertising and conversion measurement (see Section 7 for details)

These service providers are bound by confidentiality obligations and are only authorized to use your information to provide services to us.

4. Data Retention

We delete all uploaded files (CSV files, receipt images, and generated reports) within 72 hours of upload. Payment transaction records are retained as required by law and financial regulations.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including encryption in transit (HTTPS) and secure file storage. However, no method of transmission over the Internet is 100% secure.

6. Your Privacy Rights

6.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and share
• Request deletion of your personal information
• Opt-out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at [email protected]. We will respond within 45 days.

6.2 All Users (CalOPPA)

You have the right to:

• Request what personal information we have collected about you
• Request correction or deletion of your information
• Know how we respond to Do Not Track signals (we currently do not respond to DNT signals)

7. Cookies and Tracking

We use the following types of cookies and tracking technologies:

• Essential cookies: Required for the Service to function (session management)
• Google Ads cookies: We use Google Ads to measure advertising effectiveness and track conversions. Google may use cookies to track your interactions with our Service and display personalized ads across the web.

7.1 Google Ads Conversion Tracking

We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. This technology uses cookies to collect anonymous information about how you interact with our Service, including:

• Pages visited and time spent on the Service
• Whether you completed a purchase after clicking an ad
• Browser type, device information, and general location (city/region level)

This information is used to optimize our advertising and understand how users find our Service. We do not share your personal information (name, email, transaction details) with Google for advertising purposes.

7.2 Your Choices

You can opt out of personalized advertising by:

• Visiting Google Ads Settings to control your ad preferences
• Using browser settings to block or delete cookies

Note that opting out of advertising cookies does not affect essential cookies required for the Service to function.

8. Children's Privacy

Our Service is not intended for individuals under 13 years of age. We do not knowingly collect information from children under 13. If we learn we have collected information from a child under 13, we will delete it immediately.

9. International Users

Our Service is operated in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us: