Receipta Cloud and ChatGPT Privacy Notice
Effective 4 October 2026. This supplement covers the Receipta cloud account and ChatGPT connection.
Who we are and what this notice covers
T&L Health Service Group Pty Ltd operates Receipta. This notice covers Receipta account services, cloud ledger synchronization, receipt attachments and the Receipta connection in ChatGPT. Contact developer@tandlhealthservice.com.au for privacy questions, access or correction requests, or a request to permanently remove cloud data.
Information you provide
We process your account name, email address and identity-provider identifier, ledger display name and regional preferences. Your records may include merchants, purchase dates, amounts, currency, tax information and its source, reference numbers, business identifiers, categories, notes, folders, warranty details, receipt photos and PDFs. Outgoing invoices can include supplier and customer contact details, addresses, item descriptions, payment status and optional bank payment details. Only include information you are entitled to provide. Do not send passwords, API keys, full payment card details, personal government identity numbers or protected health information to the ChatGPT connection.
Cloud storage and synchronization
Cloudflare Workers runs the account and ledger services. Structured records are stored in Cloudflare D1; receipt evidence and generated report files are stored in private Cloudflare R2 storage. Existing local records upload when you select them. Automatic synchronization of new App records requires your consent. Removing a downloaded local copy does not itself delete its cloud record. Cloud image processing may resize images and remove image metadata; PDFs can retain their original content and metadata.
Why we process information
We use information to authenticate you, identify the ledger you authorized, store and retrieve records, synchronize selected records, detect possible duplicates, preserve confirmations and operation history, generate requested reports, restore recoverable records, enforce access and storage limits, and protect the service. Source identifiers, file hashes, candidate previews and request results may be retained to support these operations and safe retries.
Connecting ChatGPT
Your ChatGPT account and your Receipta account are separate. Authorization allows the connection to access the Receipta ledger and read or write records within the permissions you approve. Tool responses sent to ChatGPT may include your ledger name, account name and email, regional preferences, selected records, attachments and generated reports. Receipta receives only the inputs and resources sent to its tools; it does not independently read the full ChatGPT conversation. OpenAI separately handles information within ChatGPT under its own terms and privacy policy. Sharing a ChatGPT account does not merge Receipta accounts. However, anyone using the same authorized ChatGPT account or session may be able to access its connected Receipta ledger within the existing grant. Confirm the displayed ledger before each change and disconnect connections you no longer want shared.
Receipt sources and email candidates
Receipta MCP does not independently connect to or search your email inbox. When you provide candidates obtained from an authorized source, we may store the candidate information, email message identifiers, source labels, attachments, preview selections and import results. Preparing a preview can store those candidates before you decide which ones to record as expenses. Receipta does not receive your email password through these tools.
Other recipients and login providers
Apple or Google processes sign-in when you choose that provider; their passwords and password recovery remain with them. Cloudflare processes the service data described above. OpenAI receives information exchanged with the ChatGPT connection when you use it. Service support may need the information you send to investigate an issue or fulfill a privacy request. Processing by these providers may occur outside your country; this notice does not promise Australian-only storage. App Smart Scan and in-App AI are separate workflows and must be covered by their applicable service disclosures.
Security and access
Cloud access is checked against the authenticated Receipta member and granted permissions. Files are not public merely because the plugin is listed publicly. Account services process session information and may process IP address and browser/device information for authentication and abuse prevention. No storage or transmission system can be guaranteed completely secure.
Retention and deletion
Ordinary cloud records, originals, operation history and recoverable trash currently have no fixed automatic expiry. Moving a receipt to the recycle bin preserves its data and attachments for recovery. Disconnecting ChatGPT revokes its Receipta authorization but does not delete cloud records, and does not remove copies already received by ChatGPT. Account sign-in deletion alone does not currently perform complete cross-service deletion of ledger data and attachments; contact our privacy address for a complete removal request. Report download access expires after approximately 15 minutes; expired report files are removed by cleanup, which may occur later. Unused staged App uploads expire after approximately 24 hours and are removed by cleanup. Expiry of an action or preview confirmation does not necessarily erase the associated audit or candidate record. Removal requests require verification of ownership and are assessed by the service operator. We will explain the handling of your request, any information retained, and the reason for retention. Provider recovery copies and information already exported to other services may be subject to separate retention controls.
Your choices
You can review and correct your records, choose which existing local records to upload, control automatic upload of new records, export supported records, remove local attachment copies, move cloud receipts into recoverable trash, and disconnect ChatGPT. For access, correction, complaints or full cloud deletion, contact developer@tandlhealthservice.com.au. You may also need to manage information or conversation history separately with a connected provider.
Secure Pro
Secure Pro and Private Vault content is outside this MCP integration. Receipta cannot recover a lost vault password. Do not transfer private vault credentials or contents into this connection.