Privacy & Data Retention

What the Health Check processes

The public AR Health Check does not require an account. When you upload a CSV, ReceivableOS processes the columns you map for customer and invoice information. This can include customer names, identifiers and email addresses; invoice numbers, dates, amounts, currencies and status; and optional details such as a last payment date, description, purchase order or assigned owner.

Preview and completed analysis

Preview reads the uploaded CSV to suggest column mappings and show validation results. ReceivableOS does not intentionally save that preview to its application database.

When you calculate a completed Health Check, ReceivableOS stores normalized customer and invoice fields, row counts, currencies and the calculated analysis result in a temporary analysis record. We do not intentionally retain the original raw CSV as a stored file.

Temporary retention

Each completed Health Check analysis expires no later than 24 hours after it is created. It cannot be read through ReceivableOS after expiry. A scheduled retention job runs every 15 minutes to remove expired analysis records, so physical deletion may occur shortly after the analysis becomes unavailable rather than at the exact expiry time.

Account creation and workspace import

Creating an account does not import a Health Check into a workspace. ReceivableOS uses a separate, short-lived browser handoff to connect an eligible temporary analysis to the signed-in user. Before anything is imported, the user sees the destination workspace and analysis summary and must explicitly select “Import this analysis into my ReceivableOS workspace.”

After that authorization, ReceivableOS creates persistent workspace records. These include customers, invoices, normalized import-row data, import provenance and job details, and evidence of who consented, when they consented and which consent text version was used. The temporary Health Check analysis is removed when the import transaction completes successfully.

Persistent workspace retention

ReceivableOS does not currently apply a fixed automatic deletion period to imported workspace records, and the pre-pilot product does not provide self-service workspace deletion. Pilot users can request access to, correction of or deletion of their workspace data through the same ReceivableOS pilot or operator contact channel used to arrange access or support. Requests are handled manually after the requester's authority is verified.

Operational records and providers

ReceivableOS records limited application events to operate and protect the service. Health Check funnel events contain the event name, whether the sample or upload flow was used and, for some uploaded steps, the temporary analysis identifier. Import failures record an error category. The application does not place CSV contents in these funnel-event records. Hosting and security systems may also process standard request and operational metadata.

Supabase provides authentication and PostgreSQL database infrastructure. Vercel provides hosting and application runtime infrastructure. Those providers process data and operational metadata as needed to provide their services; this notice does not make promises about their independent retention practices.