Privacy Policy

Effective date: August 30, 2026
Last updated: August 30, 2026

DriveReceipts ("we", "us", or "our") provides a Google Workspace Add-on and web service that helps users organize receipts and expense data directly within Google Gmail, Google Sheets, and Google Drive.

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information. It should be read together with our Terms of Service.

1. Information We Collect

Account information

When you install or use DriveReceipts, we collect your email address and basic Google profile identity to authenticate your account, associate settings with your user record, and manage subscription access.

Document & transaction data

When you explicitly trigger the add-on on an email, we process the file attachment (PDF or image) and limited email metadata (such as subject and date) to extract transaction values — for example merchant name, subtotal, tax amounts, totals, and line items. We also store a Gmail message identifier to prevent duplicate filing of the same receipt.

Configuration data

We store your preferences such as default Google Sheet ID, Drive folder ID, active projects, and subscription status so the Service can file receipts where you choose.

Payment information

Subscription billing is processed by Stripe. We receive billing status and customer identifiers from Stripe but do not store or process raw credit card numbers on our servers.

Technical & usage data

We may collect standard server logs (IP address, request timestamps, error logs) to operate, secure, and debug the Service. Our public website does not use advertising or behavioral tracking cookies.

2. How We Use Your Information

We use your data solely to provide and improve the DriveReceipts service:

• Parsing receipt and invoice attachments into structured expense data;
• Formatting and appending rows to your selected Google Spreadsheet;
• Saving and organizing receipt files into your Google Drive folders;
• Preventing duplicate processing of the same email message;
• Managing subscriptions, authentication, and customer support;
• Protecting the security and integrity of our infrastructure.

We do not use your data for advertising or unrelated profiling.

3. Google API Data & Limited Use Disclosure

DriveReceipts requests access to Google user data via Google OAuth. DriveReceipts's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• No AI training: Google user data and processed receipt documents are never used to train, retrain, or improve generalized machine learning or artificial intelligence models.
• No human inspection: We do not allow humans to read your documents or emails unless you provide explicit affirmative consent for a specific support request.
• No advertising: We do not sell, rent, or transfer your data to third parties for advertising or marketing purposes.
• Scoped access: We request only the minimum permissions required:

• gmail.addons.current.message.readonly — read attachments on the single message you actively view in Gmail;
• gmail.addons.execute — run the add-on UI in Gmail;
• drive.file — create and manage files uploaded or generated directly by DriveReceipts;
• spreadsheets — append expense rows to spreadsheets you select;
• script.external_request — call the DriveReceipts API to parse receipts.

4. How We Process Receipts (Subprocessors)

To extract structured data from attachments, file content is transmitted to our backend API and processed using third-party parsing infrastructure. We use service providers only to deliver the Service, under contractual obligations to protect your data. Current categories of subprocessors include:

• Cloud hosting — application and database infrastructure;
• Receipt parsing — automated document analysis to extract fields from images and PDFs;
• Stripe — payment processing;
• Cloudflare — DNS, security, and network delivery.

Parsed receipt content is not retained longer than necessary to complete your request and return results to the add-on. We do not authorize subprocessors to use your receipt data for their own product development or model training.

5. Data Retention & Deletion

• Temporary file data sent for parsing is processed in memory and discarded promptly after extraction.
• We retain your account profile, settings, subscription status, and deduplication records (message IDs) while your account remains active.
• Server logs are retained for a limited period for security and troubleshooting, then deleted or aggregated.
• You may request deletion of your account and associated metadata at any time by emailing support@drivereceipts.app. We will delete or anonymize personal data within a reasonable period, subject to legal retention requirements.

Deleting your DriveReceipts account does not delete files already saved in your Google Drive or rows in your Google Sheets — those remain under your control in Google Workspace.

6. Data Security

We implement administrative, technical, and organizational measures designed to protect your information, including encrypted transport (HTTPS), access controls, and environment-isolated infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7. International Data Transfers

Your information may be processed in Canada, the United States, or other countries where our service providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.

8. Your Rights & Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate data;
• Request deletion of your account and personal data;
• Withdraw consent where processing is consent-based;
• Object to or restrict certain processing;
• Receive a portable copy of data you provided, where applicable.

To exercise these rights, contact support@drivereceipts.app. We may need to verify your identity before fulfilling a request.

California residents: We do not sell personal information. You may contact us for information about categories of data collected and disclosure practices as required by applicable California privacy laws.

Canadian residents: You may contact us regarding access, correction, and complaint rights under applicable Canadian privacy legislation, including PIPEDA where it applies.

9. Children's Privacy

DriveReceipts is not directed to children under 13 (or 16 where applicable under local law). We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us and we will delete it.

10. Cookies & Website Analytics

Our marketing website is a static page and does not set advertising cookies. If we add analytics in the future, we will update this policy and, where required, obtain consent before using non-essential cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date. Material changes may be communicated by email or in-product notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Information

If you have questions about this policy or our data practices:
Email: support@drivereceipts.app
Website: https://drivereceipts.app