TheZone Receipt — Privacy Policy

Official language

These Agreements are written in English. The English version is the sole official, controlling, and legally binding text.

Any translation into another language is provided only to help you understand the Agreements. Translations may be incomplete or updated later than the English text.

If there is any conflict, inconsistency, or different interpretation between a translation and the English version, the English version prevails.

Official English text: https://thezonepos.com/legal/thezone-receipt/privacy

1. Scope

This Privacy Policy describes how TheZone collects, uses, discloses, and retains personal information when you use TheZone Receipt (the "Service"). It applies to account holders and authorized users.

2. Information we collect

We may collect:

• Account data: name, email address, phone (if provided), authentication identifiers (including Google sign-in tokens processed by Firebase Authentication).
• Business profile: business name, industry, country/province or state, fiscal year settings.
• Receipt data: images you upload, derived OCR text, parsed amounts, tax fields, categories, review status, confirmation timestamps, and related metadata.
• Technical data: device/browser type, app version, IP address, logs for security and troubleshooting.
• Communications: support emails and optional marketing preferences if you opt in elsewhere.

3. How we use information

We use personal information to:

• Provide, secure, and maintain the Service (hosting, OCR, classification, reports, exports).
• Authenticate users and enforce account limits.
• Improve accuracy through rules, merchant profiles you confirm, and quality controls (not sale of your receipt content to unrelated third parties for their marketing).
• Respond to support requests and comply with law.
• Send product or marketing messages only where you have given consent required by applicable law.

4. OCR and AI processing

Receipt images and text snippets may be processed by Google Cloud Vision (OCR) and, for a minority of cases, Google Gemini API (e.g., merchant name or category suggestions, reading tax lines from text).

We configure paid API usage where applicable so customer content is not used to train public models per Google's applicable paid-service terms. Do not submit special-category data you are not authorized to share.

AI outputs are suggestions; you must review before treating them as final.

5. Service providers

We use cloud providers and subprocessors that process data on our behalf, including Google (Firebase, Cloud Functions, Storage, Vision, Gemini), and email delivery providers. They are bound by contractual terms appropriate to their role.

6. Retention

We retain account and receipt data while your account is active and as needed to provide the Service, resolve disputes, and meet legal obligations. Backups may persist for a limited period after deletion.

You may request account deletion or data access subject to verification and applicable law.

7. Storage location and cross-border transfer

Data may be stored or processed in Canada, the United States, or other regions where our providers operate. By using the Service, you acknowledge such transfer for processing purposes.

8. Your rights

Depending on your location (including under PIPEDA and provincial privacy laws), you may have rights to access, correct, delete, or withdraw consent, subject to exceptions.

Contact: support@thezonepos.com. We may need to verify identity before fulfilling requests.

9. Security

We use reasonable administrative, technical, and organizational measures. No method of transmission or storage is 100% secure; you use the Service at your own risk for residual security threats.

10. Children

The Service is intended for business users and is not directed to children under 13 (or higher age where required).

11. Changes

We may update this Policy. We will post the revised version with a new effective date. Material changes may require renewed consent where legally required.