How your receipts are protected

Every receipt photo and PDF is stored in the cloud with Google Cloud (Firebase), the same infrastructure large companies run on. That's what lets you open any receipt from any device and download a report whenever you need one.

• Encrypted in transit. Everything between your phone or computer and POP Over travels over HTTPS.
• Encrypted at rest. Stored files and records are encrypted on Google's servers.
• Never public. No receipt has a public web address. Your browser never reads our storage directly — each time you open a receipt, our server checks that you're allowed to see it, then hands it over.

• You, signed in to your account.
• Your bookkeeper, only if you invite them. They can view and download. They can't change anything unless you turn that on, and you can remove them any time.
• Your crew see only the receipts they sent themselves, and only on the phone they sent them from. Crew members never see each other's receipts or your dashboard.
• POP Over. A small number of authorized people on our team can technically reach stored data, because we run the service. We only look when you ask us for help, or when it's needed to keep the service secure and working. Every access is recorded in Google Cloud's audit logs, and we never browse receipts out of curiosity.

Nobody else. Other POP Over customers can never see your business, and we don't sell or share your receipts with advertisers or data brokers.

• We don't sell them or use them for advertising.
• We don't use them to train AI models.
• We don't send them to outside AI services. Straightening and cleaning up a photo happens on the phone that took it, before it's uploaded.

Card payments are handled by Stripe, a certified payment processor. Your card number goes straight to Stripe — POP Over never sees or stores it.

• Turn on two-step sign-in in Settings → Security, so a stolen password alone can't get into your account.
• Treat downloaded reports like the receipts themselves. The "Open PDF" links in a report let anyone who has the file open those receipts. If a report gets into the wrong hands, deleting the business turns off every link in it.
• Replace your crew link (Crew → Advanced) if it's shared with someone who shouldn't have it. The old link stops working immediately.
• Delete anything, any time. Deleting a business permanently removes every receipt, photo, PDF, crew record and report link for it right away.

We keep a written incident response plan. If we learn of a security incident that affects your data, we'll tell you promptly — what happened, what it affected, and what we're doing about it — and we'll meet every notification duty the law puts on us.

Email [email protected]. If you think you've found a security problem, please put "Security" in the subject line — those go to the front of the line.