Privacy Policy
Effective date: April 10, 2026
Last updated: April 10, 2026
1. Introduction
Oxta is operated by Blink Vigilance Systems Corp. (“we”, “us”, “our”). This policy explains how we collect, use, and protect your information when you use the Oxta mobile application and website.
2. Information We Collect
- Email address (for account creation)
- Receipt data you scan or forward (merchant, amount, date, category)
- Receipt images uploaded or emailed to us
- Device information and app usage analytics
- Province/country for tax calculation purposes
3. How We Use Your Information
- To provide expense tracking and categorization
- To generate tax-ready export reports
- To improve AI accuracy for receipt scanning
- To send important account notifications
- We never sell your data to third parties
4. Data Storage
Your data is stored securely using Supabase (PostgreSQL) and Cloudflare R2 object storage. Receipt images are stored encrypted at rest. Servers are located in Canada and the United States.
5. Email Receipt Processing
When you forward receipts to receipts@oxta.app, we process the email attachments to extract expense data. Original emails are not stored — only the extracted receipt data and attachments.
6. AI Processing
Receipt scanning uses Google Gemini AI to extract data from images. Images are sent to Google's API for processing and are subject to Google's privacy policy. We do not use your receipt data to train AI models.
7. Data Retention
Your data is retained as long as your account is active. You may request deletion of your account and all associated data by emailing love@oxta.money.
8. Your Rights
You have the right to access, correct, or delete your personal information. Contact us at love@oxta.money for any privacy requests.
9. Children's Privacy
Oxta is not intended for users under 18 years of age. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this policy periodically. Continued use of Oxta after changes constitutes acceptance of the updated policy.