Privacy Policy
Last updated: June 16, 2026
This policy explains what information ESAProof collects, how we use it — including how your receipts are read by AI — who we share it with, and the choices you have. By creating an account or subscribing, you agree to this policy.
Who uses ESAProof
ESAProof is a tool for parents and guardians managing an Arizona Empowerment Scholarship Account (ESA) for a student. The account holder is the parent or guardian. If you add information about a student (such as a name), you confirm you are that student's parent or guardian and are entitled to provide it for the purpose of managing their ESA compliance.
What we collect
- ESA Watch & reservations: the email address you give us, the page you submitted from, and the time.
- Your account: if you create one, your email address (we use passwordless sign-in links — we never store a password).
- Records you enter: student names and contract years, and the purchases you log — date, vendor, amount, subject tags, and your notes on receipt completeness.
- Receipts you give us: photos or PDFs of receipts you upload, or email to our receipts address. These files can contain personal information — names, addresses, and itemized purchases.
- Payment: your subscription is processed by Stripe. We receive confirmation of payment and your subscription status. We do not receive or store your full card number.
- The eligibility checker runs entirely in your browser — the items you search are not sent to or stored on our servers.
How we use it
- To run the service: track your five-subject coverage and deadlines, store your receipts, and build your audit-ready submission packs.
- To read your receipts (AI): when you add a receipt, its image is sent to a trusted third-party AI provider that extracts the receipt's details (vendor, date, total, line items) so we can fill them in for you. We select AI providers under terms that do not permit your data to be used to train their models, and we prefer providers offering low or zero data retention. The receipt image itself stays in our encrypted storage.
- To communicate: send sign-in links, ESA Watch alerts, and occasional service updates.
- We never sell or rent your information, and we do not share it for anyone else's advertising.
Who we share it with
We use a small number of service providers ("sub-processors") strictly to operate ESAProof:
| Provider | What they handle |
|---|---|
| Cloudflare | Hosting, encrypted storage of your records and receipts, and email routing |
| Stripe | Subscription payments (handles your card details directly; we don't see them) |
| Resend | Sending transactional email (sign-in links, alerts) |
| AI vision provider | Reading the fields off your receipt images, under no-training terms |
We may also disclose information if required by law, or to protect the rights and safety of users and ESAProof.
Where it lives, and how long
Your data is stored in encrypted storage with Cloudflare and processed in the United States and other locations where our providers operate. We keep your records and receipts while your account or subscription is active, and for a reasonable period afterward to meet the documentation-retention realities of Arizona ESA (audits can look back across recent fiscal years). You can ask us to delete your data sooner at any time.
Security
Data is encrypted at rest. Access to your records and receipts is restricted to your own account, and isolated from other users.
Your choices and rights
- Access & correction: you can view and edit your records in the app, and email us for anything else.
- Deletion: email support@esaproof.com to delete your account, records, and receipts.
- Email: every alert includes an unsubscribe link.
- Cancel: you can cancel your subscription anytime from your account.
Children's information
ESAProof is used by adults (parents and guardians) to manage a student's education account. We do not knowingly create accounts for children. Student information is collected from the parent or guardian and used only to provide the ESA-compliance service.
Changes to this policy
If we make a material change — for example, to how receipts are processed — we'll update this page and the "last updated" date, and where appropriate notify account holders.
Who we are
ESAProof is operated by Beauty Profit Limited (Hong Kong) during our launch period; operations are transitioning to ESAProof LLC (Delaware, USA). ESAProof is an independent service and is not affiliated with the Arizona Department of Education or ClassWallet. Questions or requests: support@esaproof.com.