Privacy Policy

Last updated: August 2026 · Westbrook Receipts Limited trading as Acceptum

This Privacy Policy describes how Acceptum ("we", "us", or "our") collects, uses and protects your personal information when you use the Acceptum application and website (acceptum.app). We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and applicable Irish and UK data protection law.

1. Who We Are

Acceptum is operated by Westbrook Receipts Limited, a company registered in Ireland. Our contact email is hello@acceptum.app.

2. What Data We Collect

We collect the following categories of personal and business data:

Account information: your email address, business name and VAT registration status when you create an account
Receipt data: images of receipts you capture, together with extracted information including merchant name, transaction amount, VAT amount, date and expense category
Financial records: aggregated expense data derived from your receipts, used to generate reports and tax estimates
Usage data: basic information about how you interact with the app, used to improve performance and fix issues
Device information: device type and operating system version, collected automatically for technical support purposes

3. How We Use Your Data

We use your data exclusively to provide and improve the Acceptum service:

To create and manage your account
To process and store your receipt images and extracted data
To generate expense reports and VAT estimates
To connect your account to third-party accounting software (such as Xero) when you choose to do so
To send you service-related communications
To improve the accuracy of our AI receipt analysis

We do not sell your data. We do not use your data for advertising purposes. We do not share your data with third parties except as described in this policy.

4. AI Processing of Receipt Images

When you capture a receipt, the image is processed by an AI system (Anthropic Claude) to extract relevant information. The image is transmitted securely to Anthropic's API for this purpose. Anthropic's data handling is governed by their own privacy policy. Receipt images are not stored by Anthropic beyond the processing of each individual request.

5. Data Storage and Security

Your data is stored securely in the European Union (Frankfurt, Germany) using Supabase infrastructure. We implement industry-standard security measures including:

Encryption of data in transit using TLS
Encryption of data at rest
Row-level security ensuring users can only access their own data
Secure authentication via Supabase Auth

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and receipt records within 30 days. Some data may be retained for longer where required by law, for example for tax or financial compliance purposes.

7. Third-Party Services

Acceptum integrates with the following third-party services:

Supabase — database and authentication infrastructure
Anthropic — AI processing of receipt images
Xero — accounting software integration (only when you choose to connect)

Each of these services has its own privacy policy governing how they handle data.

8. Your Rights Under GDPR

As a user in Ireland or the UK you have the following rights regarding your personal data:

Right of access: you can request a copy of all data we hold about you
Right to rectification: you can request that we correct inaccurate data
Right to erasure: you can request that we delete your data
Right to portability: you can request your data in a machine-readable format
Right to object: you can object to certain types of processing
Right to restrict processing: you can request that we limit how we use your data

To exercise any of these rights, contact us at hello@acceptum.app. We will respond within 30 days.

9. Cookies

The Acceptum mobile application does not use cookies. Our website (acceptum.app) uses only essential cookies required for the site to function. We do not use tracking or advertising cookies.

10. Children's Privacy

Acceptum is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app. The date at the top of this page indicates when the policy was last updated.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@acceptum.app.

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission of Ireland at dataprotection.ie.