Privacy Policy
Last updated: July 27, 2026
1. Data controller
Pierre Dick-Aven — contact@scancompta.eu
2. Data collected
- Account data: email, name (optional), accountant's email (optional).
- Supporting documents: photos of receipts and invoices you upload.
- Extracted data: merchant, date, amounts, VAT, category, notes.
- Payment data: processed exclusively by Stripe — we never store any card number.
- Technical data: connection logs required for the security of the service.
- Audience measurement data: pages viewed, clicks and scrolling, collected only with your consent.
We do not use any advertising cookies and never sell any data. Anonymized audience measurement is carried out only if you consent to it (see section 8).
3. Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Account and authentication | Provide the service | Performance of the contract |
| AI photo analysis | Extract receipt data | Performance of the contract |
| Sending exports by email | Transmit your documents to your accountant, at your request | Performance of the contract |
| Payment | Manage the subscription | Performance of the contract |
| Service emails | Confirmation, security | Legitimate interest |
| Audience measurement | Understand and improve site usage | Consent |
4. Subprocessors and hosting
Your data is processed by the following providers:
- Supabase (database and photo storage) — hosted within the European Union.
- Lovable (application hosting) and its AI gateway for receipt analysis (Google Gemini). Photos are sent to the AI model solely for extraction purposes and are not used to train models.
- Stripe (payments).
- Resend (transactional emails).
- Microsoft Clarity (audience measurement), only with your consent.
These providers may process some data outside the EU under safeguards compliant with the GDPR (standard contractual clauses).
5. Retention period
- Account data and supporting documents: for as long as the account is active.
- After account deletion: all data and photos are erased within 30 days.
- Technical logs: 12 months maximum.
6. Your rights (GDPR)
You have a right of access, rectification, erasure, portability, restriction, and objection regarding your data. To exercise it: contact@scancompta.eu (response within 30 days). You may also lodge a complaint with the CNIL ( cnil.fr).
7. Security
Data encrypted in transit (HTTPS) and at rest, access to receipts restricted to your account through database-level security rules, hashed passwords, PCI-DSS certified payments via Stripe.
8. Audience measurement
With your consent, we use Microsoft Clarity, an audience measurement tool provided by Microsoft Corporation. Clarity anonymously records interactions with the site (pages viewed, clicks, scrolling) to help us understand usability issues and improve the service. Input fields and sensitive content are automatically masked and never recorded.
This data may be transferred to servers located outside the European Union, under the European Commission's standard contractual clauses and the Data Privacy Framework that Microsoft adheres to. It is kept for a maximum of 30 days.
This processing relies exclusively on your consent (article 6.1.a of the GDPR). You can withdraw it at any time using the "Manage my cookie preferences" button below. No audience measurement is performed until you accept, and declining has no consequence on your use of the service.
9. Contact
For any question regarding your data: contact@scancompta.eu