Privacy Policy

Last updated: May 2026

1. Information We Collect

We collect your email address when you register. We also store the data extracted from invoices and receipts you upload (vendor names, dates, amounts, categories). We do not store the original uploaded files after processing.

To protect signup forms and understand how people discover the service, we also collect referral and campaign information, browser user-agent information, and a one-way keyed hash of the signup IP address.

2. How We Use Your Information

We use your information solely to provide the HostBooks service — organizing your expense data and generating exports. We do not sell, rent, or share your data with third parties.

3. Data Storage and Security

Your data is stored in a secured database hosted on Railway. We use industry-standard practices to protect your data. However, no method of transmission or storage is 100% secure.

4. Third-Party Services

We use the following third-party services to operate HostBooks:

Anthropic — AI extraction of invoice data. Uploaded text is sent to Anthropic's API for processing. See Anthropic's privacy policy at anthropic.com.

Stripe — Payment processing. We do not store your credit card details. See Stripe's privacy policy at stripe.com.

Railway — Cloud hosting. See Railway's privacy policy at railway.app.

Cloudflare — Traffic protection and signup abuse prevention. See Cloudflare's privacy policy at cloudflare.com.

5. Data Retention

Your data is retained while your account is active and as needed to provide the service. You can export or delete your account from the Account page. After account deletion or a service shutdown, personal data is deleted or anonymized when it is no longer required, except for limited records that must be retained for legal, tax, fraud-prevention, dispute, or backup purposes.

6. Your Rights

Depending on your location, you may have rights under CCPA (California), PIPEDA (Canada), or GDPR (EU) to access, correct, or delete your personal data. Contact us at [email protected] to exercise these rights.

7. Cookies

We use session and first-visit attribution cookies to keep you logged in, prevent abuse, and measure acquisition. We do not use advertising cookies.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email.

9. Contact

Questions about privacy? Email us at [email protected].