Legal

Privacy Policy

This policy explains what HSA Expense Vault collects, why, and what you can do about it. Your receipts describe your medical care, so we treat them as sensitive by default.

Last updated August 7, 2026

The short version

We collect the receipts you upload, the details read from them, and the minimum needed to run your account.
We do not sell your data and we do not share it with advertisers.
You can export your entire archive or delete your account at any time.

This summary is here for readability. The sections below are the ones that apply.

Who this policy covers

HSA Expense Vault is operated by [Legal entity name]. This policy covers the website and the receipt vault application. It applies to everyone who visits the site or holds an account.

What we collect

We collect four kinds of information.

Account information: Your email address, your password in hashed form, and any name you choose to add. If you turn on two factor authentication we store the information needed to verify your second factor.
Receipts and the data in them: The files you upload, kept exactly as uploaded, and the fields associated with them: provider, date of service, amount, category, your own notes, and whether the receipt has been claimed. Where OCR is used, the provider, date, and amount read from the file are stored alongside the original.
Billing information: Your plan, its renewal date, and billing history. Card numbers are handled by our payment processor and never reach our servers.
Technical information: Server logs including IP address, browser type, and the pages requested, along with basic aggregate usage counts. We use these to keep the service running and to investigate abuse.

We do not ask for a Social Security number, an HSA account number, or bank credentials, and you should not put them in a receipt note. The vault never connects to your HSA and never moves money.

Health related information

A medical receipt can reveal who you saw, when, and for what. You decide what to upload and how much detail to keep in your notes. Whatever you upload, we treat it as sensitive: sensitive fields are encrypted at rest, access is limited to the small number of people who need it to operate the service, and it is never used for advertising or sold to anyone.

We do not use your receipt contents to train machine learning models.

How we use it

To store, display, search, and export your receipts.
To read the provider, date, and amount off an uploaded file, and to flag likely duplicates.
To calculate the illustrations that show what a receipt might have been worth if the money had stayed invested.
To share a vault with the household members you invite.
To take payment, send receipts for that payment, and manage renewals.
To send service messages such as security alerts, billing notices, and material changes to this policy.
To keep the service secure, debug problems, and meet legal obligations.

We send marketing email only if you opt in, and every marketing message has an unsubscribe link. Service messages are not optional while you hold an account.

We do not sell your personal information and we do not share it with advertisers or data brokers. We share it in four narrow situations.

Service providers: Companies that host our servers, store files, process payments, send email, and perform OCR on uploaded documents. They act on our instructions, are bound by contract, and may use the data only to provide their service to us.
People you invite: If you add someone to a household vault, they can see and add receipts in that vault. Removing a member ends their access going forward.
Legal requests: If we are legally required to disclose information, we will do so. Where we are permitted to notify you first, we will.
A change of ownership: If the service is acquired or merged, your information may transfer as part of that transaction. It remains subject to this policy until you are told otherwise.

How we protect it

Sensitive fields are encrypted at rest.
Traffic between your browser and our servers is encrypted in transit.
Two factor authentication is available on every account, including free accounts.
Internal access is limited to staff who need it, and administrative access is logged.

No service can promise perfect security, and we will not pretend otherwise. If a breach affects your information, we will notify you and the appropriate regulators as required by law. Keeping your password unique and turning on two factor authentication is the single most useful thing you can do on your side.

How long we keep it

We keep your receipts for as long as your account exists, because the whole point of the product is a record that survives decades. You can delete an individual receipt at any time. When you delete your account, we remove your receipts and files from live systems within 30 days, and they age out of encrypted backups within 90 days.

We keep a minimal billing record after deletion where tax and accounting law requires it. That record does not include your receipts.

Your choices and rights

Access and export: Download your full archive as a ZIP containing a ledger PDF, a CSV, and every original file. There is no export fee and no lock in.
Correct: Edit any field on any receipt, including fields filled in by OCR.
Delete: Delete individual receipts, remove a household member, or delete your entire account.
Object and restrict: Ask us to stop a particular use of your information, or to restrict it while a question is resolved.
Complain: Raise a concern with us first, and with your state attorney general or data protection authority if we do not resolve it.

Depending on where you live, some of these are legal rights rather than courtesies. Residents of California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws have the right to know, delete, correct, and to opt out of sale or targeted advertising. We do not sell personal information or use it for targeted advertising, so there is nothing to opt out of. To exercise any right, email privacy@hsaexpensevault.com. We will not treat you differently for asking.

If you are in the European Economic Area or the United Kingdom, we process your information to perform our contract with you, to meet legal obligations, and on the basis of our legitimate interest in operating and securing the service. Health related information is processed on the basis of your explicit consent, which you give by choosing to upload it and can withdraw by deleting it.

Cookies and local storage

We use a session cookie to keep you signed in and a small number of cookies needed for security, such as protection against cross site request forgery. This marketing site stores your light or dark theme preference in your browser using local storage, which never leaves your device.

We do not use advertising cookies or third party tracking pixels.

Children

The service is not intended for anyone under 18, and you must be 18 to hold an account. We do not knowingly collect information from children. An adult may store receipts for care their child received, because that record belongs to the adult who paid for it. If you believe a child has created an account, contact us and we will remove it.

Where your information is processed

We operate in the United States and your information is stored and processed there. If you access the service from outside the United States, you are sending your information to a country whose privacy laws may differ from your own.

Changes to this policy

If we change this policy in a way that materially affects how we handle your information, we will email you and update the date at the top of this page before the change takes effect. Older versions are available on request.

Contact us

Email privacy@hsaexpensevault.com, or write to [Legal entity name], [Mailing address]. We answer privacy requests within 30 days.