At Receivos it's important that our users understand and find information about GDPR, how Receivos complies with it, and how Receivos protects user data.
What is GDPR?
The General Data Protection Regulation (GDPR) is a regulation of the European Union. Its purpose is to provide guidelines for collecting and processing the personal data of individuals residing within the EU. The GDPR became effective on May 25, 2018.
GDPR and Receivos
Receivos is committed to compliance with GDPR guidelines, as we serve users within the European Union. Our data storage and processing practices have been carefully developed to ensure both user protection and full adherence to these required regulations.
Your Data and Receivos
We obtain your personal data through three main methods: directly from you, from third parties such as our business partners and service providers, and automatically when you use our Services.
Information we collect directly from you includes, but is not limited to:
- First and last name
- Company name
- Mailing address and email address
- Telephone number
- Username
- IP Address
- Browser information
- Transaction and Billing Data
Your Data from Third-Party Sources
We obtain personal data about you from various third parties, including our business partners and service providers. This may include:
- Third-Party Service Account Information: If you use a third-party service to interact with our Services (e.g. using a log-in feature like Facebook Connect or Google).
- Sharing content via social media where the third-party service may send us information about you (e.g. data from your public profile), provided that the third-party service's policies and your account settings permit such sharing.
- The specific information we receive is governed by the policies and settings of that third-party service.
Personal Data Collected
When you use our Services, we automatically collect certain Personal Data, which includes:
- Identifiers and Device Information: IP address, device identifiers, web browser information, hardware and software information (Log data).
- Usage and Activity Data: Page view statistics, browsing history, usage information, access times (Log data).
- Transaction Details: Information about transactions you upload using the Services, such as the amount, date, and time they occurred.
- Location Data: General location information derived from your IP address or zip code.
- Tracking Technologies: Data collected via Cookies, pixel tags, SDKs, and other similar tracking technologies.
How We Use Your Information
We use your information for the following purposes:
-
Service and Support:
- Create and manage user profiles.
- Communicate with you regarding the Services, including announcements, updates, or offers.
- Process orders.
- Provide support and assistance for the Services.
- Respond to user inquiries and fulfill user requests.
-
Personalization:
- Personalize website content and communications based on your preferences.
-
Legal, Security, and Compliance:
- Comply with our legal or contractual obligations.
- Resolve disputes.
- Protect against or deter fraudulent, illegal, or harmful actions.
- Enforce our Terms of Service.
When and Why Your Personal Data Is Used
We only process your Personal Data when we have a lawful basis to do so. This includes:
Contractual Necessity
We require the following categories of Personal Data to fulfill our obligations under the Terms of Service and provide you with the Services. If you fail to provide this data, you may be unable to use some or all portions of the Services:
- First and last name
- Email address
- Mailing address
- IP Address
- Transaction and Billing Data
Legitimate Interests
We process the following categories of Personal Data when we believe it supports our legitimate interests or those of third parties: first and last name, email address, and mailing address. Examples of these legitimate interests include:
- Operating and improving our business, products, and services.
- Marketing our products and services.
- Providing customer support.
- Protecting against fraud or security threats.
- Complying with legal obligations.
- Completing corporate transactions.
Consent
In some cases, we process Personal Data based on your explicit consent, which will be clearly indicated to you at the time the data is collected.
Other Processing Grounds
Occasionally, we may also process Personal Data to:
- Comply with a legal obligation.
- Protect the vital interests of you or other data subjects.
- Perform a task carried out in the public interest.
What Has Receivos Changed to Comply?
We are pleased to note that Receivos is compliant with GDPR requirements. To ensure complete adherence, we have thoroughly reviewed our data systems and security protocols. Our Privacy Policy and Terms of Service have been updated to provide further clarity on our data handling practices, which include the following specifics:
- User Data Deletion: When an account is deleted by a user, Receivos commits to removing their raw data within six months. We may continue to retain and use your information as necessary to meet our legal obligations, resolve any disputes, enforce our agreements, and keep receipt information for enablement to our partners — excluding personal information.
- Document Backups: Document data may persist in backup files for up to three years. These rolling backups are not accessible by any external non-Receivos personnel and are systematically deleted after three years.
- Account Data Backups: For audit purposes, account data may be retained in backup files for a maximum of three years. These backups are strictly inaccessible to any non-Receivos personnel.
- Action Event Data: Random action event data (user actions while logged in) can be deleted upon request. If no deletion request is made, Receivos may retain this data for aggregated analysis. This analysis helps us understand how users interact with our platform, enabling us to improve the efficiency of future task completion.
Questions?
Not sure about something or have a question? Email us at help@receivos.com.