Privacy Policy
Last Updated: July 7, 2026
AITOMATE LLC ("we", "us", or "our") operates RCPT (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our expense tracking and financial management application.
We are committed to protecting your privacy and ensuring the security of your personal and financial data. Please read this policy carefully to understand our practices regarding your information.
1. Information We Collect
1.1 Account Information
When you register for RCPT, we collect information such as your name, email address, company name, and authentication credentials through our secure authentication provider (Auth0).
1.2 Financial Data
To provide our expense tracking and invoicing services, we collect and store financial information including but not limited to: expense records, income transactions, vendor information, client details, invoice data, receipt images, and accounting entries.
1.3 Usage Data
We automatically collect certain information about your device and how you interact with our Service, including IP addresses, browser type, operating system, access times, pages viewed, and navigation patterns.
1.4 Payment Information
Payment processing is handled by Stripe, our third-party payment processor. We do not store your complete credit card information on our servers. Stripe maintains PCI-DSS compliance for secure payment processing.
2. Data Security and Encryption
2.1 Encryption at Rest
All data stored in our databases is encrypted at rest using industry-standard AES-256 encryption. This includes your financial records, personal information, uploaded receipts, and all other data associated with your account.
2.2 Encryption in Transit
All communications between your device and our servers are encrypted using Transport Layer Security (TLS) 1.3 or higher. This ensures that your data remains secure and private during transmission over the internet.
2.3 Infrastructure Security
Our application is hosted on enterprise-grade cloud infrastructure with multiple layers of security controls, including firewalls, intrusion detection systems, and regular security audits. Database access is restricted and monitored continuously.
2.4 Access Controls
We implement strict access controls and authentication mechanisms. Only authorized personnel with a legitimate business need can access user data, and all access is logged and audited.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our expense tracking and invoicing services
- Process your transactions and manage your account
- Send you technical notices, updates, security alerts, and administrative messages
- Respond to your comments, questions, and customer service requests
- Generate reports and analytics to help you understand your financial data
- Detect, prevent, and address technical issues and fraudulent activity
- Comply with legal obligations and enforce our terms of service
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
4.1 Service Providers
We work with trusted third-party service providers who assist us in operating our Service, including:
- Auth0: Authentication and identity management
- Stripe: Payment processing
- Cloud hosting providers: Data storage and infrastructure
- Backblaze: File storage for receipts and attachments
These providers are contractually obligated to protect your data and use it only for the purposes we specify.
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain certain information for tax, legal, or regulatory purposes.
6. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Data Portability: Request export of your data in a structured, machine-readable format
- Objection: Object to processing of your personal information in certain circumstances
- Withdrawal of Consent: Withdraw consent where we rely on consent to process your data
To exercise any of these rights, please contact us at privacy@rcptapp.com
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
8. International Data Transfers
Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for international data transfers in accordance with applicable laws.
9. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
RCPT by AITOMATE LLC
Email: info@aitomate.dev
