Privacy & your data
Rover files your financial paperwork — and guards it. Please don't send standalone sensitive IDs (SSNs, driver's licenses, passports, or passwords). If one appears on an otherwise-normal receipt, Rover masks it before filing.
What Rover keeps
- The documents you send (receipts, statements, photos, PDFs) and the details extracted from them — vendor, amount, date, category.
- The original file is kept and linked to its ledger entry (shown on the item page) — that's your audit evidence. Originals are retained for 7 years (the typical IRS look-back window), or until you delete the item or your account.
- Your accounts and the ledger of what's been filed, so you can retrieve and export it.
- For a chat-export you upload, Rover keeps only the expense(s) it found — never the whole conversation.
Sensitive data
Rover is for paperwork, not identity documents. If you send a standalone sensitive ID, Rover declines to store it. If sensitive numbers appear incidentally on a normal receipt, they're masked before anything is filed.
You're in control
- Confirm before filing: nothing is filed without your explicit OK.
- Export anytime: download your whole ledger as a CSV for your accountant.
- Undo: reverse a filing whenever you need to.
Security
- Each household's data is isolated at the database level — there is no shared read path.
- Traffic is encrypted in transit (HTTPS), and access requires a signed-in session.
- Rover never sells your data.
FileItRover organizes and stores your records. It is not tax, legal, or financial advice — for those decisions (including what's deductible), talk to your CPA or advisor.
Questions? Just ask Rover.