Privacy Notice

This notice explains how Andrew Distefano ("we", "us"), operator of HST Helper, handles your personal information. We are the data controller responsible for the personal information described here.

Information we collect

• Account data: name, email address and login credentials.
• Ledger data: receipt images you scan and details extracted from them (merchant, dates, subtotal, taxes, totals).
• Support messages: emails you send us.
• Technical data: IP address, device and browser identifiers, usage and error logs.

How and why we use it

• To create your account and provide the Service, including scanning and monthly summaries (performance of our contract with you).
• To keep the Service secure and prevent fraud (legitimate interests).
• To fix problems and improve the Service (legitimate interests).
• To respond to support requests (contract and legitimate interests).
• To meet legal obligations (legal obligation).
• For marketing, only where you have given consent, which you may withdraw at any time.

Who we share it with

• Service providers that host data, process receipt images, and send email on our behalf.
• Paddle, our Merchant of Record, for sales, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities where required by law.

We do not sell your personal information. Some providers may process data outside Canada; where they do, we rely on contractual safeguards such as standard contractual clauses.

Retention

We keep your data while your account is active and as needed to meet legal obligations. When no longer needed, it is deleted or anonymised. Monthly summary files are kept for a limited period.

Your rights

Subject to applicable law (including Canada's PIPEDA and, where applicable, GDPR), you may request access to, correction of, or deletion of your data, restrict or object to processing, request a portable copy, and withdraw consent. You may also complain to the Office of the Privacy Commissioner of Canada or your local authority. We respond within 30 days.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-account data isolation.

Cookies

We use only essential cookies and local storage needed to keep you signed in and run the Service. We do not use advertising cookies. You can clear these in your browser settings, but you will be signed out.

Contact

Andrew Distefano — hsthelpersupport@gmail.com