PRIVACY POLICY
Snakebite Technologies LLC d/b/a RCRDR
Last Updated: September 22, 2026

1. Introduction

This Privacy Policy describes how RCRDR collects, receives, uses, stores, discloses, and otherwise processes information when you use the RCRDR receipt extraction and organization service (the “Service”), including submissions through SMS/MMS, email, supported web interfaces, and other supported methods.

The Service is primarily designed for businesses and their personnel, but individuals may also use the Service. The Service is not directed to children under 18.

2. Information We Collect

We may collect account and contact information, including name, email address, telephone numbers, authentication information, business information, and billing or subscription information.

We may collect receipt, invoice, and financial information, including images, merchant or vendor names, dates, totals, taxes, line items, job or project information, and information contained in uploaded documents.

We may collect extracted or generated information, including OCR results, categorization, project tags, summaries, calculations, and other organizational fields. These outputs may be inaccurate and should be reviewed against the original information.

We may collect and retain communications you send to or receive from RCRDR, including SMS/MMS messages, support requests, and other service-related communications. Some communications or related processing data may be retained temporarily, while others may be retained longer when reasonably necessary for customer support, account history, security, dispute resolution, legal compliance, or other legitimate business purposes.

We may collect information generated through your use of RCRDR, including error logs, diagnostic data, and information needed to troubleshoot, maintain, secure, and improve the Service. Depending on the nature of an error or system event, diagnostic records may incidentally contain information submitted through the Service, such as receipt-related data, contact information, or other customer information. We retain error logs and diagnostic records for up to 14 days, unless a longer period is reasonably necessary for security investigations, legal compliance, or resolving an ongoing issue. We use reasonable measures to limit access to and protect diagnostic information.

3. How We Use Information

We may use information to:

• Provide, operate, maintain, secure, and support the Service;
• Receive and process receipt and invoice submissions;
• Extract and organize information and generate categorization, calculation, or project-allocation suggestions;
• Process customer instructions and transactional SMS/MMS communications;
• Manage subscriptions, payments, and billing;
• Detect and prevent fraud, abuse, security incidents, and unauthorized use;
• Troubleshoot, evaluate, develop, test, and improve the Service and related systems;
• Send operational notices and material policy updates; and
• Comply with legal obligations and respond to lawful requests.

We do not use Customer Data for unrelated purposes merely because it is available to us.

4. Artificial Intelligence and Automated Processing

RCRDR uses third-party AI and automated processing services, including Google Gemini and Google AI services as configured by RCRDR, to extract and structure information from submitted receipts and documents. Information may be transmitted to these providers as necessary to provide the Service.

RCRDR may also use Customer Data, including submitted receipts and documents, extracted information, corrections, responses, feedback, and other interactions with the Service, to develop, test, evaluate, and improve RCRDR’s own receipt-processing systems, models, algorithms, categorization functionality, extraction functionality, and related features.

RCRDR’s use of Customer Data for these purposes is for RCRDR’s own Service development and improvement and does not transfer ownership of Customer Data to RCRDR.

RCRDR will not intentionally use Customer Data to train a general-purpose AI model for purposes unrelated to providing or improving the Service unless RCRDR first provides applicable notice and obtains any consent required by law.

AI-generated and automated information may be inaccurate, incomplete, or incorrect and should be reviewed against the original document.

5. Service Providers

RCRDR uses third-party service providers and infrastructure as part of operating the Service, including:

• Google Gemini / Google AI Services — AI-assisted receipt and document extraction and related processing.
• Twilio — inbound and outbound SMS/MMS communications.
• Supabase — database hosting, storage, and receipt-image/file infrastructure.
• Stripe — subscription payment processing and billing. RCRDR does not store complete payment-card numbers on its own servers.
• Render — application/server hosting and infrastructure.

These providers may process information on RCRDR’s behalf as reasonably necessary to provide, maintain, secure, or support the Service and subject to applicable agreements and requirements.

6. SMS/MMS Communications

The account owner may designate telephone numbers for use with the Service, including numbers used by employees, contractors, or other persons authorized by the account owner.

The account owner is responsible for having the authority and obtaining any consent required by applicable law before designating another person’s telephone number for use with the Service.

RCRDR may send SMS or MMS messages to designated telephone numbers for purposes related to providing, operating, securing, or supporting the Service, including receipt-processing notifications, confirmations, extraction summaries, assignment notifications, account-related notices, service notices, and other operational communications.

Message frequency varies. Message and data rates may apply depending on the recipient’s mobile carrier or service plan. A recipient may opt out of SMS messages by replying STOP where supported and may request assistance by replying HELP. Opting out of SMS messages may limit or prevent features that depend on SMS communications.

RCRDR may suspend or restrict messaging functionality if it reasonably believes that messaging activity violates applicable law, these Terms, carrier requirements, or creates a security or operational risk.

SMS and MMS delivery may depend on mobile carriers and telecommunications networks outside RCRDR’s control. RCRDR does not guarantee that every message will be delivered, received, or delivered without delay.

Consent to receive SMS/MMS messages is not a condition of purchasing any goods or services.

7. Sharing and Disclosures

We do not sell personal information, receipt data, financial information, or extracted ledger information to third parties for their independent marketing purposes, and we do not rent or trade personal information for advertising.

We may disclose information to service providers acting on our behalf, when required by law, to protect rights and security, prevent fraud or abuse, enforce our agreements, or facilitate a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.

Text messaging opt-in data and consent will not be shared with third parties or affiliates for their own marketing or promotional purposes. 

8. Secure Receipt Image Storage

Receipt images are stored in private, access-controlled storage. Access is restricted through application-level authorization and storage controls.

Receipt-image access URLs are temporary and expire after 60 seconds. RCRDR uses reasonable measures designed to prevent unauthorized access to receipt images.

9. Your Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, obtain a portable copy of, or object to certain processing of personal information, as well as appeal rights where required.

We may verify identity and authority before responding and will respond within legally required periods.

10. Security

We maintain commercially reasonable administrative, technical, and organizational measures designed to protect information, which may include access controls, authentication, encryption where appropriate, secure infrastructure, logging, and least-privilege practices.

No system can be guaranteed completely secure.

11. Retention

We retain information only as reasonably necessary for the purposes described in this Policy, including service delivery, legitimate business records, dispute resolution, enforcement, security, fraud prevention, and legal compliance. Receipt images and extracted data may be retained while an account is active.

Cancellation of billing does not automatically result in immediate deletion of customer information. Unless the customer requests earlier permanent deletion, eligible customer information associated with canceled accounts is scheduled for deletion on the next April 16 deletion date.

RCRDR may allow customers to return and access eligible retained information without maintaining an active paid subscription. Any such access may be subject to reasonable account, security, or other requirements and does not prevent the information from being scheduled for deletion.

Eligible customer information will be scheduled for deletion on April 16 at approximately 2:00 a.m. Mountain Daylight Time (MDT), subject to documented exceptions for legal compliance, security investigations, dispute resolution, fraud prevention, or other lawful retention requirements.

Upon a valid permanent deletion request, RCRDR will prepare and send a final available data export or packet containing customer-associated information that RCRDR reasonably determines is available for export. RCRDR will delete the customer’s information within 30 days after the final data export or packet is sent, subject to information RCRDR is required or permitted to retain for legal compliance, security, fraud prevention, dispute resolution, enforcement of agreements, or other lawful purposes.

RCRDR will maintain an internal record of the export date, deletion deadline, and completion status.

Deletion from active systems does not necessarily result in immediate deletion from encrypted backup or disaster-recovery systems. Residual copies may remain for a limited period until securely deleted or overwritten in accordance with RCRDR’s documented backup and retention practices.

12. Data Export and Deletion Requests

Contact support@rcrdr.pro to request access, export, or deletion.

The final data export or packet may not include information RCRDR is legally prohibited from providing or information belonging to another person.

Once customer information has been permanently deleted, RCRDR may be unable to recover or restore that information.

13. Cookies and Similar Technologies

We may use cookies, local storage, session technologies, or similar tools reasonably necessary for authentication, sessions, preferences, security, performance, and functionality.

We do not use receipt contents or financial information for behavioral advertising.

14. Children’s Privacy

The Service is not directed to children under 18, and we do not knowingly collect children’s information through the Service.

15. Changes

We may update this Policy and will provide reasonable notice of material changes. Where affirmative consent is legally required, we will obtain it.

16. Contact

Snakebite Technologies LLC d/b/a RCRDR
3045 Roche Dr South
Colorado Springs, Colorado
support@rcrdr.pro
719.825.9299