Privacy Policy

Papertrail (“we”, “us”) is an invoice and subscription tracking service that helps freelancers and small teams find business receipts in their inbox, track recurring subscriptions, and prepare tax-ready reports. You can reach us any time at meenasujal60@gmail.com.

• Account information — your name, email address, and a securely hashed password when you sign up.
• Email content you connect— when you link a Gmail account, we read messages solely to detect and extract receipt and invoice data (vendor, amount, date, invoice number). We store the extracted fields and the message’s subject line; we do not store message bodies or attachments.
• Subscription & billing data — the subscriptions we detect on your behalf, and your plan status. Payments are processed by Razorpay; we never see or store your full card details.
• Bank transaction data — only if you choose to link a bank account, we receive the transaction list for that account to detect recurring charges. This is optional and independent of Gmail.
• Usage & device data — basic logs and device tokens needed to operate capture devices and keep your account secure.

When you connect Gmail, Papertrail requests read-only access (gmail.readonly) for a single purpose: to scan your messages for receipts and invoices and organize them for you. Specifically:

• We read message contents only to identify and extract receipt/invoice fields. We do not read messages for any other purpose.
• We do not scan your whole mailbox. We ask Gmail only for messages matching a receipt-related search (receipt, invoice, payment, billing, subscription, charged), limited to messages newer than your last scan.
• We never sell Google user data, and we never use it for advertising.
• We do not use Google user data to train generalized AI/ML models.
• Message content is sent to one third-party provider (OpenAI) purely to extract those fields — see Automated extraction below.
• Access can be revoked at any time from your Google Account permissions, or by disconnecting Gmail in Papertrail settings — which deletes our stored tokens and also revokes the grant with Google.

Papertrail’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Reading a receipt out of an email is done by a language model, not by a human. For each candidate message, Papertrail sends the sender, subject, date, attachment file names, and up to the first 6,000 characters of the message text to the OpenAI API, which returns the structured fields we store: vendor, amount, currency, date, invoice number, and category.

• OpenAI acts as our processor for this step only. It is the sole third party that receives your email content.
• Per OpenAI's API data usage policy, data submitted through their API is not used to train their models, and is retained for up to 30 days for abuse monitoring before deletion.
• No human at Papertrail reads your messages as part of this process.
• If you never connect Gmail, no email content leaves your inbox and this step never runs.

You can read OpenAI’s commitments for API data at openai.com/enterprise-privacy.

• Sensitive tokens and credentials are encrypted at rest.
• All data is transmitted over encrypted (HTTPS/TLS) connections.
• Passwords are stored only as salted hashes, never in plain text.
• Access to production data is limited to what is required to operate the service.

We do not sell your personal data. We share it only with the service providers (subprocessors) required to run Papertrail, and only to the extent needed to deliver the service. Each is bound to protect your data. In full, they are:

• Neon — managed Postgres database where your account, extracted receipt fields, and subscriptions are stored.
• Vercel — application hosting and serverless compute.
• OpenAI — receipt field extraction. The only subprocessor we send raw message content to; see Automated extraction above.
• Resend — transactional email (verification codes, renewal alerts, the weekly digest).
• Razorpay — payment processing. We never see or store your full card details.
• Plaid — optional bank connection, only if you choose to link an account in Settings. Plaid receives your bank credentials directly; we never see them. No Google user data is shared with Plaid.

We keep your data only for as long as your account is active. You can permanently delete your account and all associated data at any time from Settings → Danger zone. Deletion is immediate and irreversible: it removes your receipts, subscriptions, connected accounts, and profile, and cancels any active subscription. If Gmail was connected, deleting your account also revokes our OAuth grant with Google, so Papertrail disappears from your Google Account permissions.

You may access, correct, export, or delete your data at any time. Most of this is available directly in-app; for anything else, email meenasujal60@gmail.com and we will respond promptly.

We may update this policy as the product evolves. Material changes will be reflected by the “Last updated” date above, and where appropriate we will notify you by email.