Privacy Policy
How FacturAI uses your data and how to exercise your rights.
Effective: 21 October 2026
1. Who is responsible
Mossbyte operates FacturAI as a sole proprietorship in the Netherlands, KVK 42152943. Privacy requests: privacy@facturai.io. Support: support@facturai.io.
2. Data we use
- Account/profile identifiers, household membership and access settings.
- Receipt images, PDFs, forwarded email content/headers, attachments and Telegram submissions.
- Extracted purchases, categories, original-document links, AI responses and household corrections.
- Ask questions, saved answers, filters and calculation status/timing, shared within the household. Saved answers may be reused; we do not save a frozen copy of the displayed receipts.
- Actual Budget connection details, reference data, matching transactions and requested changes; authorised API and webhook delivery information.
- Membership offers, terms acceptance, billing country, customer/payment references, amounts, dates, receipts, renewal/refund status, card brand and last four digits.
- Product interactions, request IDs, IP/network information, security/diagnostic logs and support messages.
Stripe collects billing addresses and card details. FacturAI does not receive full card numbers or security codes. At checkout we send household/order references, the selected offer, terms version and return links. If its Customer has no email, we prefill your verified sign-in email. We do not send Stripe receipt documents, shopping items or Ask questions. Free use does not create a Stripe customer or subscription.
3. Data sources
Data comes from you, household members, our website/bot, forwarded email, Clerk, Stripe and services you connect. Forwarding does not give us access to your mailbox. A person named in a document need not be its uploader or a household member.
4. Purposes and legal bases
- Service agreement: provide receipt history, AI processing, corrections, Ask, integrations, membership payments and support, including steps you request before purchase.
- Legitimate interests, where applicable: verify access, prevent abuse, diagnose failures and keep the service reliable, balanced against your rights.
- Legal obligations: accounting/tax records and lawful requests.
- Separate permission: optional browser analytics, marketing and any reuse of your documents for testing. Accepting Terms or this policy is not that permission.
5. AI processing
Gemini processes receipt images, image-rendered PDF pages, selected email text and supported attachments, not raw PDF/EML files. Ask sends your question and purchase data selected by FacturAI's tools. We keep extracted data and AI responses; correction memory stays within your household.
We do not train our own models on your documents. Reuse for tests, benchmarks, coding agents, screenshots or another model needs separate permission. Staff access is limited to a documented legal purpose or authorised support/testing, not routine reading to improve the service.
6. Who receives data
- AWS: application hosting, databases, storage, queues and incoming email.
- Cloudflare: public delivery and protection where configured.
- Clerk: sign-in, profiles and household membership.
- Stripe: purchases, renewals, billing management and refunds; it also processes data for fraud prevention and legal compliance under its Privacy Policy.
- Google Gemini: the AI processing described above.
- Telegram: submissions and messages when you use our bot.
- Svix: enabled webhook payloads and delivery metadata; household/user identifiers for the endpoint-management portal.
- Grafana Cloud: operational logs and monitoring where active.
- PostHog: enabled browser/server product analytics, as described below.
- Services you authorise: your Actual Budget endpoint, API clients and configured webhook recipients.
Providers have different legal roles. We do not sell household data or authorise unrelated uses.
7. Processing locations
Our primary AWS infrastructure is in Ireland (eu-west-1). External providers may process elsewhere, including outside the EU; not all processing stays in AWS or the EU.
8. Retention
| Data | Retention and deletion |
|---|---|
| Originals, purchase history, AI output and corrections | Kept with the receipt/household, not automatically purged when access ends. Receipt deletion removes its saved source where supported; whole-household deletion includes AI output and corrections. |
| Temporary uploads and email staging | Expire after 2 days. Email queues retain messages up to 4 days; failed-message queues up to 14 days. |
| Account and membership data | Kept as needed to operate the account, subject to applicable data requests. |
| Payment and refund records | Kept for the agreement, disputes and legal accounting/tax duties, including after access ends where required. Stripe applies its own retention rules. |
| Actual Budget snapshots | Reference data and four-day transaction windows around receipt dates remain after disconnecting. Administrators can delete synced data in Sync settings; Clerk Organization deletion also starts cleanup. Neither undoes changes in Actual. |
| Events, logs, backups and support | Kept under operational retention settings and while needed to resolve requests, disputes or legal duties. Data requests are assessed across these copies, not only the active account. |
9. Deactivation and deletion
Deactivation blocks access; leaving does not remove household history. Neither replaces erasure. For deletion or other data requests, contact privacy@facturai.io, even without an active account. We assess identity, authority, other members' rights and legal retention duties. We normally reply within one month, explaining any lawful extension or refusal within that time, and notify relevant recipients of changes/deletion where required.
10. Browser storage and analytics
Sign-in uses necessary browser storage. With permission in privacy settings, PostHog browser analytics records pageviews, interactions (including pricing/membership choices and celebration clicks), performance and first-campaign attribution stored in localStorage. Visitors use an anonymous identifier; after sign-in analytics is linked to your user ID. Choosing necessary storage only keeps browser analytics off.
Server-side product events, including supported bot navigation, actions and request outcomes, are configured separately and are not controlled by the browser choice. Events identify the transport and use the same internal user and Household identifiers across channels. We exclude receipt media, purchase descriptions, Ask prompts, contact details and authentication tokens from PostHog. Session replay, heatmaps, surveys, experiments and PostHog error tracking are off.
11. Messages
We send sign-in messages, requested updates, submission acknowledgements, security and legally required notices. Marketing needs separate permission and a simple, free opt-out.
12. Your rights
Where applicable, you can request access, correction, erasure, restriction or a portable copy, object to processing, and withdraw consent without affecting earlier lawful processing. Contact privacy@facturai.io; rights are not limited to paying users or administrators. You may complain to the Autoriteit Persoonsgegevens or another competent data-protection authority.
13. Automated processing
AI extracts, categorises and summarises purchases and answers questions. Check originals and correct errors. Results are not used for decisions about you with legal or similarly significant effects.
14. Policy changes
Effective from 21 October 2026. We publish material changes with a new date and obtain consent where required.