Privacy policy

Last updated: 19 October 2026

1. Who is responsible

Prixly is run by Petru Iordachi, a private individual in the Republic of Moldova, who is the controller of the personal data described here. Contact: tudorelgr@gmail.com.

This policy follows Law No. 195/2024 on personal data protection of the Republic of Moldova and, for visitors in the European Union, the General Data Protection Regulation (EU) 2016/679.

2. What we collect and why

  • Visiting the site: our servers record technical request data (IP address, browser, time, requested address) to keep the service working and secure. Basis: legitimate interest. Kept for 14 days.
  • Error monitoring: New Relic receives technical data about page errors and load times, without cookies, so we can fix problems. Basis: legitimate interest.
  • Analytics: Google Analytics counts visits and page views only if you click "Accept" in the cookie banner. Basis: your consent. Kept for the period set in our Google Analytics account (at most 14 months).
  • Contributor request: the name and email you send in the "Become a Contributor" form, to review the request and reply. Basis: steps taken at your request. Deleted automatically after 7 days.
  • Contributor account: your name, email and role, stored in our sign-in service. Prices you add and changes you make are recorded with your user id and shown to administrators. Basis: our agreement with you (the Terms of use). Kept while the account exists; after it is deleted, the prices stay on the site linked only to an internal id.
  • Receipt photos: when you scan a receipt, the photo is stored and sent to Anthropic (Claude) to read the store, products and prices. Photos are deleted automatically after 7 days, the reading result after 24 hours. A receipt can show card digits or a cashier's name, so please cover them first. Basis: our agreement with you.
  • Telegram: authorised contributors can send receipt photos to our Telegram bot. We store the photo with your Telegram user id and username; it is deleted after 7 days.
  • Your browser: the chosen region, language, basket, cookie choice and sign-in session are kept in your browser's storage so the site works as you set it. This needs no consent.

3. Who receives the data

We use these service providers, who process data only on our instructions. We do not sell personal data and do not use it for advertising.

  • Amazon Web Services: hosting, database, file storage, sign-in and email. Data is stored in Frankfurt, Germany; pages are delivered through a worldwide content network.
  • Anthropic (USA): reads receipt photos.
  • Google (Google Analytics): only with your consent.
  • New Relic: error monitoring, EU data centre.
  • Mapbox (USA): maps and address search. Your browser contacts Mapbox when a map is shown, so Mapbox sees your IP address.
  • Barcode lookups send only the barcode to Open Food Facts and UPCitemdb, no personal data.

4. Transfers outside Moldova and the EU

Anthropic, Google and Mapbox can process data in the USA. These transfers are covered by the providers' data processing terms, which include the European Commission's standard contractual clauses.

5. Your rights

You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on legitimate interest. Write to tudorelgr@gmail.com; we answer within one month.

You can withdraw your analytics consent at any time with "Cookie settings" at the bottom of every page.

You can complain to the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md). If you live in the EU, you can also complain to the data protection authority of your country.

6. Automated suggestions

Software, including AI, matches receipt lines to products and suggests possible duplicate products. A person always reviews and confirms. No decision with a legal or similarly significant effect on you is made automatically.

7. Security

Connections are encrypted (HTTPS), stored data is encrypted, and only administrators can see contributor data.

8. Children

The site is not aimed at children, and we do not knowingly collect their data.

9. Changes to this policy

We publish any new version on this page with a new date.