Privacy Policy

Effective Date: 6/25/2023

1. Overview

This Privacy Policy describes how Receiptify uses Google OAuth 2.0 to authenticate users and enable storage of receipt data in the user’s own Google Drive and Google Sheets account.

2. Information We Access

We access the following information only with your explicit consent:

• Google account basic profile information (email and user ID)
• Google Drive files created by the application or explicitly selected by the user
• Google Sheets files created by the application
• Receipt images uploaded by the user

3. How We Use Information

• Authentication: Google OAuth is used only to sign in users securely.
• File Storage: Receipt images are uploaded to the user’s Google Drive in folders selected by the user.
• Data Processing: Receipt images are processed to extract structured data such as merchant name, date, and total amount.
• Spreadsheet Storage: Extracted data is written as rows into Google Sheets created by the application.

4. Third-Party Services (AI Processing)

We use third-party AI services (such as OpenAI and/or Google Gemini) to process receipt images. Only the uploaded image is sent to these services for processing.

• AI services are used only for extracting structured receipt data.
• AI services do not access Google Drive or Google Sheets.
• Data sent to AI services is not used for training purposes.

5. Data Storage

• No Google user data is stored on our servers.
• All receipt images remain stored in the user’s Google Drive.
• All spreadsheet data remains stored in the user’s Google Sheets.
• OAuth tokens are used only to perform authenticated Google API requests and are not shared with third parties.

6. Data Access Principles

The application follows the principle of least privilege and only requests access to files created by the application or explicitly selected by the user.

• No full Google Drive access is requested or used.
• No background scanning or listing of Drive files is performed.

7. Data Sharing

We do not sell, rent, or share user data with third parties.

8. Data Protection and Security

Receiptify is designed with privacy and security as core principles. We implement industry-standard safeguards to protect the Google user data that you authorize the application to access.

8.1 Secure Communications

All communication between Receiptify, your browser, and Google services is encrypted using HTTPS/TLS.

8.2 Minimum Access

Receiptify requests only the minimum Google OAuth scopes necessary to provide its features. The application only accesses Google Drive files that it creates or files that you explicitly authorize for use with Receiptify. Receiptify cannot browse, scan, or access unrelated files in your Google Drive.

8.3 Data Storage

Receipt images remain stored within your own Google Drive account. Expense records remain stored inside Google Sheets located in your own Google Drive. Receiptify does not maintain a separate cloud database containing copies of your receipt images or Google Drive documents. Application configuration data and user preferences may be stored locally or as required for application functionality.

Receiptify creates and manages Google Sheets files using the Google Drive file access scope (drive.file). These spreadsheet files are created within the user's Google Drive and are accessible only through files authorized for use with Receiptify.

8.4 Use of Google User Data

Google user data is used exclusively to provide the features requested by you, including:

• Receipt processing
• Receipt organization
• Expense tracking
• AI-powered receipt information extraction
• Search
• Analytics

Receiptify uses AI services only to process receipt information requested by the user. Receipt data is not used to train generalized AI models.

Receiptify's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Receiptify does not:

• Sell your personal information
• Share Google user data with third parties except when required to provide the requested service
• Use Google user data for advertising
• Use Google user data to build user profiles for advertising
• Use Google user data to train generalized artificial intelligence or machine learning models

8.5 User Control

You remain the owner of your Google Drive files and Google Sheets at all times. You may revoke Receiptify's access to your Google Account at any time through your Google Account Security settings. Revoking access immediately prevents Receiptify from accessing your Google data in future sessions.