Google API Services Disclosure

What Google data we request

SpentOn requests a single, read-only Gmail scope — https://www.googleapis.com/auth/gmail.readonly — and only after you explicitly connect your Gmail account. We do not request any scope that can send, delete, modify, archive, label, or forward your email.

Why we request it

We read your Gmail messages to identify and process financial email — bank and card transaction alerts, receipts, bills, statements, refunds, subscriptions, renewals, reimbursements, and merchant emails. A triage step discards non-financial email before any AI sees it.

How we use it

We use this data only to provide and improve user-facing SpentOn features: extracting transaction amount, date, merchant, category, and payment source; tracking bills, subscriptions, renewals, refunds, and reimbursements; and reflecting your spending, budgets, and goals back to you.

How we do not use it

• We do not sell, rent, or transfer Google user data to advertising platforms, data brokers, or information resellers.
• We do not use Gmail data for advertising, retargeting, or audience building.
• We do not use Gmail data to determine creditworthiness or for any lending purpose.
• We do not use Gmail data to train generalised or shared AI/ML models.
• We do not allow humans to read your Gmail data, except: with your explicit consent (e.g. to debug an issue you report), where necessary for security, to comply with applicable law, or on data that has been aggregated and anonymised.

How we store and protect it

Sensitive email content and your Gmail OAuth tokens are encrypted at rest, and every user's data is isolated at the database level (row-level security). See our Security page for details.

Your control

• Revoke SpentOn's access at any time from your Google Account permissions, or by disconnecting Gmail inside SpentOn (Settings → Connected email accounts).
• Delete imported Gmail data — or your whole account — at any time. See Data Deletion.

More detail

Our full Privacy Policy describes everything we collect, our sub-processors, and your rights. Questions about Google data handling? Email privacy@spenton.dev.