Privacy Policy

Who is responsible

For account, security, billing and service operation data, the legal entity named in the footer acts as controller.

For receipts, card statements and related financial documents uploaded to a company workspace, the customer organization is normally the controller and Bilagsmappa acts as processor on the customer's instructions.

Categories of data

• Account data: email address, authentication provider, user ID, role and membership.
• Company data: company name, plan, workspace settings and audit metadata.
• Financial documents: uploaded receipts and card statements, extracted merchant names, amounts, dates, card last four digits and comments.
• Technical data: system logs, AI usage metrics, deletion job status and security events.
• Plus waitlist: the email address you submit to be notified when Plus becomes available.
• Future email intake: sender address, subject, message metadata and attachments when the feature is enabled.

Purposes and legal bases

We do not use uploaded financial documents to train public foundation models.

• Provide the service, authenticate users and operate workspaces (contract / legitimate interest).
• Extract document fields, match receipts to transactions and generate exports (contract).
• Protect the service, detect abuse and maintain audit trails (legitimate interest / legal obligation).
• Notify you when Plus becomes available, if you have asked us to (consent).
• Bill paid subscriptions and comply with tax/accounting obligations where applicable (contract / legal obligation).

Automated processing and AI

Bilagsmappa uses automated document extraction to read receipts and statements. Results may require human review before export.

AI processing is performed in Google Cloud Vertex AI in the EU. Document content is sent for extraction and categorization; prompts and outputs are not written to customer-facing logs.

Recipients and subprocessors

We use infrastructure and AI providers listed on our Subprocessors page. Access is limited to what is necessary to deliver the service.

Customers may export PDFs to their own systems; after export, the customer controls further processing.

Storage regions and international transfers

Customer workspace data is stored in the EU by default.

Firebase Authentication and some support or billing tooling may involve processing outside the EU. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Retention

Active workspace data is kept while the subscription or workspace remains active.

Plus waitlist emails are kept until you ask us to delete them, or until we have notified you that Plus is available and the list is no longer needed.

System logs expire after 7 days by default. AI usage events expire after 90 days by default.

When a user or company is deleted through in-product controls, associated personal data is removed according to our deletion policy, subject to backup retention windows.

Your rights

Use Contact us in the footer. Workspace owners should route employee/subject requests through their own organization when Bilagsmappa acts as processor.

• Access, rectification, erasure, restriction, portability and objection where applicable.
• Withdraw consent only where processing is based on consent.
• Lodge a complaint with your local supervisory authority.