CStoreScan ("we", "us") is based in Alabama, USA. CStoreScan is a mobile app and web portal for convenience store operators: you photograph paper vendor invoices, we extract the line items using AI services, you review and accept the result, and we generate and email EDI 810 files and invoice PDFs to the back-office system you configure.
This policy explains what we collect, why we collect it, who processes it on our behalf, and the choices you have. CStoreScan is sold to businesses, not consumers, so the data we hold is primarily business data about your stores and the invoices you scan.
Information we collect
- Account information. Your name, email address, and either a hash of your password or, if you sign in with Google or Apple, the identifiers those providers share with us. We never see or store your Google or Apple password.
- Store details. Store name, address, and the back-office email address you configure as the destination for EDI files and invoice PDFs.
- Invoice images and extracted contents. The photos of paper invoices you scan, and the structured data extracted from them: vendor names, line items, quantities, and prices.
- Usage and scan metering. Counts of scans and basic usage records so we can operate the service and bill plans correctly.
- Billing information. Subscription billing is handled by Zoho Billing and payment processing by CSG Forte. Card numbers are entered directly with the payment processor. We never store card numbers ourselves.
How we use your information
- To provide the service: extracting line items from your invoice photos, presenting them for your review, and generating and emailing EDI 810 files and invoice PDFs to your configured back-office destination.
- To improve extraction accuracy for your account, for example by applying the corrections you make during review to future scans from the same vendor.
- To meter usage, manage subscriptions, and process billing.
- To respond to support requests and send transactional email about your account.
- To produce the anonymized regional price benchmarks described below.
We do not sell your personal information, and we do not use your data for third-party advertising.
AI processing of invoices
Invoice text extraction is performed by AI services. When you scan an invoice, the invoice image and the text on it are processed by our AI providers, Anthropic and Mistral AI, to read the printed values into structured line items. Extraction is limited to reading what is printed on the invoice; you review and accept every invoice before anything is sent onward.
Service providers (subprocessors)
We use a small set of providers to run CStoreScan. Each processes data only as needed to deliver its part of the service:
- Anthropic - AI invoice text extraction (invoice images and text).
- Mistral AI - AI invoice text extraction (invoice images and text).
- Render - application hosting and data storage (United States).
- Vercel - hosting for this marketing website.
- Zoho Billing - subscription billing.
- CSG Forte - payment processing. Card details are handled by CSG Forte, not by us.
- Resend - transactional email, including delivery of EDI files and invoice PDFs to your back office.
- Google and Apple - optional sign-in providers, if you choose to use them.
Tenant isolation and anonymized benchmarks
Your account's data is strictly isolated. One account's invoices, stores, and extracted data are never shown to another account, with a single, narrow exception: anonymized regional price benchmarks.
Item-price data from customer invoices contributes to anonymized price benchmarks shown to other customers in your nearby region. These benchmarks are k-anonymized: only a vendor name, a price, and a count of operators are ever shown. No store name, account, or operator identity is ever included or derivable from what is displayed. This aggregation is described in our Terms of Service, and using the service constitutes consent to it.
Data retention and deletion
We retain your account data and scanned invoices while your account is active so you can refer back to processed invoices. You can request deletion of your account and your stored invoice data at any time using the contact methods below, and we will delete them, except where we are required to retain limited records (for example, billing records we must keep for tax and accounting purposes).
Security
We protect your data with industry-standard measures, including encrypted connections (HTTPS), hashed passwords, and per-account isolation enforced in the application. No system is perfectly secure, so we encourage you to use a strong, unique password and to keep your sign-in credentials private.
Children
CStoreScan is a business service. It is not directed to children, and it may not be used by anyone under 16 years of age.
Changes to this policy
We may update this policy as the service evolves. If we make material changes, we will give you at least 30 days' notice before they take effect, by email or by a notice in the product.
Contact us
For privacy questions or to request deletion of your account and data, use the contact form on our homepage or reach us through our support channel. We respond to verified requests from account holders.