Incident #F9F047 · 21 FEB 2026minor
Kivra adds section on non-users receiving digital receipts; analytics data anonymized after 48 hours
A new section covers people who receive digital receipts from senders without being Kivra users. Their receipt content data (from the Sender) is used for business intelligence and product development, and anonymized after 48 hours rather than 45 days. Analytics processors listed are Google Cloud EMEA and Hex Technologies, plus Tableau Ireland, now described as data processor rather than controller.
Taken from you
- Non-users who receive digital receipts now have their receipt content data processed for analysis and product development
Won back
- Data in this non-user analytics purpose is anonymized after 48 hours, versus 45 days in the older user-facing entry
- Tableau Ireland now described as a processor under Kivra's instructions rather than a controller
Evidence · 4 of 4 quotes matched in source
3.4.1 When you receive digital receipts without being a Kivra User Here is a description of how your personal data is handled if you receive digital receipts without being a Kivra User.+ inserted · ✓ matched in source
Kivra then processes your personal data for analysis on an overall level in order to develop and improve our services.+ inserted · ✓ matched in source
The data is anonymized 48 hours after processing.+ inserted · ✓ matched in source
Hex Technologies Inc. providing an analytics and visualization service in the EU/EEA in the role of Kivra's data processor.+ inserted · ✓ matched in source
Archived version ↗ · 221 words changed