Financial CSVs, invoice references, supplier names and scanned amounts are processed on your device. They are not uploaded to CreditLatch, Stripe, an AI provider or an analytics service.
During a scan
Imported data lives in the current tab’s memory. A local browser worker performs reconciliation. Closing or reloading the tab clears unsaved work. A saved workspace is a file you download and control. Files you restore are read locally. CreditLatch does not encrypt your downloaded files; use your firm’s approved secure storage.
Payments and license delivery
When paid plans are activated, Stripe handles checkout information. CreditLatch retains the order ID, plan, payment state, email address and license expiry for fulfillment and billing. Operational records are stored for up to 400 days; Stripe retains its own transaction records under its policies. Resend delivers transactional access emails. No financial scan data is included.
Cookies and hosting
Essential cookies protect checkout completion and store a signed license. No advertising or behavioral analytics is included. The hosting provider processes normal request information such as IP addresses and server logs. Rate limits store a hashed IP-derived key for two minutes. License links are bearer access links: keep them private.
Before paid access opens
The seller’s verified identity and contact information must be present at checkout and on the terms page. Until then, only the free scanner is available. Your software use does not authorize anyone to contact your suppliers.