Privacy Policy

What this policy covers

This policy explains what SortReceipts collects, why, where it is kept, and how to have it removed. It applies to the web app at sortreceipts.qianling-tech.top, operated by Qianling Tech.

The app runs on Cloudflare's network. The account database and the uploaded receipt images sit in two separate services, both listed under sharing.

What we collect

• Account details: the email address you register with, and a password. The password is stored as a PBKDF2-SHA256 hash; the plaintext is never kept.
• Receipt images: the photos you upload, stored under a key tied to your account.
• Extracted fields: merchant name, amount, tax, date, category, and the raw text the model read from the image. Each receipt also gets a fingerprint so duplicates can be spotted.
• Records you type in: project names, customer names and contact details, and the contents of monthly reports.
• Payment records: plan, amount, currency and transaction ID. Card numbers go straight to Stripe or PayPal and never reach our servers.
• Abuse prevention: hashed IP addresses rather than raw ones, counts of failed sign-ins, per-user API call counters, and hashed email verification codes.

Why we process it

We do not use your receipts for advertising, and we do not use them to train models of our own.

• To run the service: read the image, file the record, and show monthly totals.
• To bill you and answer support requests.
• To keep the service usable: rate limits, duplicate accounts, and abuse.

Who else sees it

We do not sell personal data.

• Cloudflare — hosts the site, the API and the account database.
• Tencent Cloud COS — stores the receipt images.
• Stripe and PayPal — process card and PayPal payments.
• Resend — delivers the six-digit verification email.
• An external vision model API — receives the image during recognition, because that is how the fields are produced.

How long we keep it

Account data stays until you ask us to delete the account. A receipt image stays until you delete the record it belongs to, or delete the account.

Verification codes expire within minutes. Counters used for rate limits are kept only long enough to enforce those limits.

Cookies and measurement

One cookie keeps you signed in. It is called `px_token` and the app does not work without it.

We do not set advertising cookies, and we do not follow you across other sites. Page counts are collected in aggregate, without cookies.

Your choices

Write to support@qianling-tech.top from the address on the account. We will reply and confirm when the request is done.

• Ask for a copy of your data, or for anything wrong in it to be corrected.
• Delete a single receipt in the app at any time.
• Delete the whole account by emailing us; there is no self-serve button yet.
• Export records as CSV on paid plans.

Children

This is a business tool and is not intended for anyone under 16. If an account belongs to a child, tell us and we will remove it.

Changes

When this policy changes in a way that affects you, the new version is posted here with a new date, and material changes are announced on the site.