Privacy Policy

Who This Covers

This policy covers the Skanota web application and its API. It applies to everyone with an account, and to visitors of the public pages.

It is written under Indonesian law, in particular Law No. 27 of 2022 on Personal Data Protection (UU PDP). Where this document and that law disagree, the law wins.

What We Collect

Your account: the name and email address you register with, or the name, email address and profile picture Google gives us when you sign in with Google. A password, if you set one, is stored only as a hash — we cannot read it and cannot tell you what it is.

Your receipts: the image you upload, and the merchant, date, total, tax, items, category and notes read from it or entered by you.

Your sessions: the IP address and browser user-agent of each device you sign in on, so you can see them on the settings page and sign them out.

Your payments: the plan, the amount, the currency, the status, the payment method name Midtrans reports, and the order reference. We never see or store your card number, and no card details reach our servers.

Your enquiries: if you write to us through the contact form, we keep your name, email address, company name if you give one, the subject and what you wrote, so we can answer it and so an enquiry is not lost if the email fails to send. You do not need an account to use that form, so this is the one thing here we may hold about somebody who is not a customer.

We do not ask for your national identity number, your date of birth, or any of the categories the PDP law calls specific personal data.

Your Receipt Images Are Sent to Google

Reading a receipt is done by Google's Gemini API. When you upload an image, that image is sent to Google's servers outside Indonesia, and the text Gemini returns is what fills in the merchant, date and total.

This is the single most important sentence in this document, because a receipt is a photograph of what you bought, where, and for how much. If you would not send a particular receipt to a third party, do not upload it.

We send the image and nothing else — not your name, not your email address, not your account id.

Who Else Processes Your Data

Google (Gemini API) reads your receipt images, as described above.

Vercel hosts the application, stores your uploaded images, and runs a page-view counter. That counter sets no cookies and does not identify you.

Neon hosts the database that holds your account, receipts and payment records.

Midtrans processes payments. When you pay, you leave our site for theirs, and your card or wallet details are handled entirely by Midtrans.

An email provider delivers the messages we send you — password resets, address confirmations, and any notification you have switched on.

We do not sell your data, and we do not share it with advertisers.

Where Your Data Is Stored

The database is hosted in Singapore. Uploaded images are stored on Vercel's storage, which is distributed. Receipt images are additionally sent to Google for reading, as described above.

So your data leaves Indonesia. Under the PDP law we are telling you this, and by using the service you are agreeing to it.

How Long We Keep It, Honestly

Our pricing page publishes a retention window for each plan — 30 days on the free plan, one year, two years and five years on the paid plans.

We are not enforcing those windows today. Nothing is deleted automatically. A receipt you uploaded in the first week of this product is still there, whatever plan you are on. We would rather tell you that than let you assume old data has quietly gone.

When we do switch automatic deletion on, we will email you before anything of yours is deleted, and this page will say so.

Your Rights

Under the PDP law you may ask us what we hold about you, ask us to correct it, ask us to delete it, ask us to stop processing it, and ask for a copy in a form you can take elsewhere.

You can already do all of this yourself: your receipts are on your own pages and you can edit or delete each one, the analytics export gives you a CSV of your own data, and the settings page will erase the account outright.

Deleting Your Account Is Not Yet a Button

The settings page has a Delete All Data control and a Delete Account control, and both work. There is nothing to ask us for and nobody to write to.

Delete All Data removes every receipt you have uploaded and the images with them, and leaves your account standing. Delete Account erases the account: the receipts and images go, and so do your name, your email address, your password, your saved sessions and your API keys. You are signed out on every device, and the address is free to register with again.

Two things are kept, and we would rather tell you than let you find out. Your payment records stay, because they are the record of money that changed hands and they are our accounting as well as yours — they no longer carry your name or your address. And we keep the fact that a scan happened and used an allowance, because that is what you were charged for; what the receipt actually said is deleted with everything else.

Security

Passwords are stored as bcrypt hashes. Sessions are signed and can be revoked from the settings page. Your receipt images are served through our own server, which checks that the receipt belongs to you before it hands the image over — the storage address is never published.

No system is perfectly secure. If you believe your account has been accessed by somebody else, change your password, sign out your other devices from the settings page, and tell us.

Children

Skanota is not for children. If you are under 18, please use it only with a parent or guardian's consent. We do not knowingly collect data from children, and if you tell us we have, we will delete it.

Changes to This Policy

We will update this page when what we do changes, and the date at the top will change with it. If a change materially affects your rights, we will email you rather than relying on you re-reading this page.

Contact

Use the contact form on this site, or reply to any email we have sent you. Tell us what you want done and from which account, and we will answer.