Privacy and security
What ReceiptFold does not keep
- Your emails. Each message that reaches your forwarding address is read once, then deleted.
- Your PDFs and pictures. They are saved in your own drive, not ours.
- Your rows. They live in your spreadsheet. ReceiptFold keeps no copy.
- Your inbox. ReceiptFold never asks to read your mailbox. It only gets the receipts your filter or rule sends. (Connecting Outlook creates the rules and reads the last year once for the import; the access is dropped when it ends.)
What ReceiptFold keeps
- Your sign-in email.
- Your workspaces, sources (forwarding addresses) and their settings.
- A monthly count of receipts read, for your plan.
- The connection to your spreadsheet (an encrypted credential), and your AI model key if you add one (encrypted).
ReceiptFold never sells or shares your information.
Access to your files
- Google: the
drive.filescope only, so ReceiptFold sees only the files it creates or that you pick. Never the rest of your Drive. - Microsoft: OneDrive's app folder
Apps/ReceiptFoldonly. - Disconnect or delete the workspace and the access is revoked at the provider the same minute. Your file stays in your account.
Security
TLS 1.3 in transit; AES-256-GCM encryption at rest for every credential; OAuth 2.0 with the narrowest scopes each provider offers; HMAC-SHA-256 signed internal calls; sign-in by single-use email link (no passwords). ReceiptFold runs on Cloudflare and Google Cloud.
Full text: the Privacy Policy and the Terms of Service.