Clear answers about your purchase data

No. Purchase Ledger does not sell personal information, and private purchase history is not used to build an advertising profile.

No. Purchase Ledger does not require bank credentials. An authorized read-only matching request may use a retailer, date, and amount to find likely receipts; those supplied transaction details are used transiently and are not persisted.

No. You sign in on the retailer's own website. If you agree to connect it, the retailer gives Purchase Ledger permission to read only the purchase information it allows. Your retailer password never comes to us.

You upload a receipt or invoice, a temporary copy is sent to Amazon Textract, and dates, items, and totals are suggested. You review and correct the suggestions before saving. Purchase Ledger does not retain the original upload or rendered pages after processing.

No. Price sharing starts off and stays off unless you turn it on. You can still use your private purchase history and saved prices without sharing anything with the community.

Yes. In Settings, you can download a copy of your purchase data, erase your purchases while keeping your account, disconnect a retailer, or delete your entire account.

No. Purchase Ledger helps you organize and understand purchases. It cannot place an order, complete checkout, charge a card, or move money.

No. Access begins only after you authorize a connection from Purchase Ledger.

After authorization, Purchase Ledger returns information responsive to the signed-in user's authorized read-only request, using the available purchase, price, and privacy tools.

No. The integration is read-only. It cannot import purchases, change settings, delete information, connect retailers, buy products, or move money.

Yes. Sign in, open Settings, choose Security, and remove the connected application or revoke its authorization. You can also revoke browser and extension connections there.

Connected services handle received information under their applicable terms, plans, privacy practices, and data-control settings. Purchase Ledger does not make a universal guarantee about another service's use.

We keep your name and email, the purchase details and saved prices you choose to add, any notes or product links you save, your settings, and a record of important account choices such as accepting the Terms or turning on price sharing. We also keep a small amount of sign-in and security information needed to protect your account. We do not keep the original receipt or invoice file after it is read.

We use it to organize your purchase history, show your past prices, create the insights and reminders you choose, help with your account, and keep the service secure. We do not sell your personal information or use your private purchase history to build an advertising profile.

We may share the product, store, price, package size when known, date, and whether the price involved a sale or membership. The system gives each person a made-up label so their prices count once without revealing who they are. We do not share your name, email, order number, receipt image, full shopping basket, notes, product-page link, or retailer sign-in information.

No. Other users do not see your individual entry. Purchase Ledger combines prices from several different people before showing a community trend. If there are not enough people to protect everyone's privacy, no trend is shown.

Not always. An alert is based on the newest price Purchase Ledger has received from you, a connected retailer, or another approved source. The alert shows when that price was found. Check the retailer before making a trip because the price or stock may have changed.

We use public safety notices from the U.S. Consumer Product Safety Commission. When possible, we compare the exact barcode number for your product with the number in the notice. Always open the official recall notice to confirm the model, affected dates, and what the manufacturer says to do.

You can access it while signed in. An app can read only the information you allow when you connect it. Authorized support staff may access what they need to help with your account, and their important actions are recorded for security.

Private account records stay separated so one user cannot access another user's ledger. Community trends use privacy safeguards and minimum contributor thresholds rather than exposing individual observations.

Yes, when reasonably necessary to provide support, diagnose or correct a problem, protect the service, maintain data integrity, or fulfill an authorized request. Administrative access is restricted, and important access is recorded.

Yes, when necessary to correct errors, resolve support problems, maintain data integrity, or fulfill an authorized request. Administrative changes are recorded. Administration cannot accept the Terms, enable optional community sharing, or authorize connected services on your behalf.

No. Passwords are not stored in readable form, and the support interface does not expose authentication tokens, retailer secrets, encryption keys, or other protected credentials.

Purchase Ledger requires every new account to confirm its email directly with Purchase Ledger. This verifies that the address can receive important account, privacy, and security communications before private account features are enabled.

Deleting purchase data removes receipts, purchased items, saved prices, and community contributions while keeping your account, settings, sign-in, and retailer connections. Deleting the whole account removes those remaining active records too. Protected backups may retain a limited copy until they expire, and narrow legal or security exceptions may apply.