Paragonix

Information We Collect

When you use Paragonix, we collect:

• Authentication Data: Email address, name, and profile picture from OAuth providers (Google, Microsoft, GitHub)
• Receipt Data: Receipt images and text extracted via OCR/AI parsing
• Usage Data: Upload counts, timestamps, and session information
• Technical Data: IP address, browser type, and device information

How We Use Your Information

We use your data to:

• Process receipt uploads using OpenAI's OCR/AI services
• Enable real-time WebSocket collaboration on receipt splitting
• Enforce rate limits (3 uploads per 24-hour period for authenticated users)
• Display contextual advertisements through Google AdSense
• Improve our service and user experience

Third-Party Services

We share data with the following service providers:

• OpenAI API (United States): Receipt images are processed using AI for text extraction and parsing. By using our service, you consent to international data transfer to service providers in the United States. OpenAI retains receipt data for up to 30 days for abuse monitoring per their API terms.
• Google AdSense: We display contextual advertisements using only product names, categories, and seller location from receipts. No personal information is shared with advertisers.
• OAuth Providers: Google, Microsoft, and GitHub for authentication only.
• AWS S3: Encrypted storage for receipt images.
• reCAPTCHA Enterprise: Google's spam and bot protection service.

Note: We do NOT sell your personal data to any third parties.

Data Storage and Security

Your data is protected with:

• Encrypted PostgreSQL database storage
• HTTPS encryption for all communications
• Access controls and authentication requirements
• 90-day log retention for security monitoring

Data Retention

• Receipt data: May be deleted after 30 days of inactivity. Users should download important data before it expires.
• User accounts: Retained until deletion is requested
• Security logs: Retained for 90 days for security purposes

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access: Request a copy of your data via Export Data
• Rectification: Correct inaccurate data through your profile
• Erasure: Delete your account and all associated data via Delete Account
• Portability: Receive your data in machine-readable JSON format
• Objection: Object to data processing by contacting us

User Content and Ownership

Users retain all rights to uploaded receipt images. AI-generated parsed data (JSON structures, extracted text) has no copyright protection.

Data Controller

Alibee (Tax ID: 5792070360) is established in the European Union and acts as Data Controller for all user data processed through Paragonix.

Children's Privacy

Paragonix is not intended for users under 13 years old. We do not knowingly collect data from children under 13.

Cookies and Tracking

We use cookies for:

• Session management and authentication
• Security and CSRF protection
• Analytics and advertising (Google AdSense)

Google Consent Mode v2 is implemented to manage advertising and analytics cookies in compliance with GDPR.

Governing Law and Jurisdiction

This Privacy Policy is governed by Polish law. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of Polish courts.

Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the service after changes constitutes acceptance of the updated policy. Users will be notified of significant changes via banner notification.

Contact Us

For privacy concerns or data requests, contact us via our feedback form.