Subject
Receiptter (processor) processes personal data on behalf of the merchant (controller) to deliver digital receipts and related customer features, as required by Article 28 GDPR.
Processing details
| Data subjects | The merchant's customers; the merchant's staff using the dashboard |
|---|---|
| Categories of data | Purchase details, payment category, fiscal references, device identifier, IP address; optionally email and consent record, rating and comment |
| Special categories | None intended. The merchant must not send them. |
| Purpose | Delivering receipts, buttons, newsletter sign-ups and feedback; statistics for the merchant |
| Duration | The term of the contract plus up to 30 days for deletion |
Our duties
- Process data only on documented instructions, including these terms and dashboard settings.
- Ensure that people with access are bound by confidentiality.
- Not use the data for our own purposes, including advertising or profiling.
Subprocessors
The merchant authorises the subprocessors listed on the Subprocessors page. We give at least 30 days' notice of a new subprocessor by email; the merchant may object on reasonable grounds and terminate if we cannot accommodate the objection.
Security measures
- Encryption in transit (TLS) and at rest by our hosting provider; provider credentials and two-step secrets additionally encrypted with AES-GCM.
- Logical separation of merchants on every query; staff roles limited to assigned stores; automated cross-tenant tests.
- Passwords, sessions, API keys, recovery codes and receipt links stored only as hashes; one-time display of keys and codes.
- Two-step verification available to every user and required for platform administrators.
- Rate limiting, origin checks against cross-site requests, signed tap verification for secure tags.
- Data minimisation: card numbers are never accepted; long digit runs are masked.
- Audit log of account changes.
Personal data breaches
We notify the merchant without undue delay, and where possible within 48 hours, after becoming aware of a breach affecting its data, with the information needed for its own notifications.
Assistance
We help the merchant answer data subject requests and with impact assessments, within the information available to us.
Return and deletion
The merchant can export its data from Settings at any time. After the contract ends we delete it within 30 days, unless law requires storage.
Audits
We make available information needed to demonstrate compliance and allow audits by the merchant or its auditor with reasonable notice, at most once a year unless a breach has occurred.