Last updated 2 October 2026.
CostShade hides price and tax figures on documents you upload (invoices, receipts, purchase orders) and gives you back a copy with those figures removed. Everything else on the document is left untouched.
A document you upload is processed on our server in order to produce the masked copy, then automatically and permanently deleted - both the original and the masked copy - within about 15 minutes. We don't keep copies beyond that, don't use your documents to train any model, and don't share them with anyone else. If you need the masked file again after it's been deleted, you'll need to re-upload the original.
We store the email address and organisation name (if given) you sign up with, and a record of which documents your account has masked (filenames and counts, not the documents themselves, once deleted). Your password is never stored as plain text - it's hashed (bcrypt) before it ever reaches our database, so we can't see or recover it ourselves.
We use one cookie to keep you logged in between page visits. We don't use advertising or tracking cookies.
Only your own account can see the documents and results you've uploaded - this is enforced in the application itself, not just hidden in the page.
Documents are processed on a secured cloud server. If you're considering CostShade for your organisation and need specifics on hosting location or a formal data processing agreement, contact us and we'll work through it with you.
If this policy changes in a meaningful way, we'll update this page and change the date above.
Questions about this policy or your data: maneshkr6@gmail.com.