Privacy Policy
Your data powers Owed and stays under your control. We don't run ads, we don't sell your personal information, and you can export or erase your account from Settings anytime.
01What we collect
Your email, display name, and language; items, receipts, and notes in your ledger; claims and correspondence; plan and billing status; and, if you connect Gmail, your Gmail address, an encrypted send/read credential, and the purchase details we extract from order emails.
02How we use it
To run your ledger, watch deadlines, draft, send, and track claims, and process billing. Receipt images, order emails, and claim text are processed by our AI provider (OpenAI) solely to extract purchase details and draft letters on your behalf; our AI providers are contractually barred from training their models on this data.
03Sharing
We share data only with vendors that help us operate the product (hosting, AI processing, email delivery, payments), under contracts limiting their use to providing services to us. We don't use your information for advertising and we never sell it. We may disclose data if the law requires it, to protect the service or users, or as part of a merger or acquisition — in which case this policy continues to apply. We may use aggregated or de-identified data that cannot identify you to improve and develop Owed.
04Storage and security
Data lives in Supabase (Postgres) with row-level security, so your rows are only readable by your authenticated session. Receipts and proofs live in private storage buckets. Gmail credentials are stored encrypted (AES-256-GCM) and are decrypted only server-side at the moment of use. No system is perfectly secure, but access is minimized by design.
05Payments
Subscriptions are processed by Stripe. Your card details go directly to Stripe — we never see or store full card numbers.
06Your rights
Export everything you've ever put into Owed as JSON, or delete your account — ledger, claims, receipts and all — from Settings. Deletion is immediate and irreversible. You can also write to us to exercise any data right your jurisdiction grants.
07Retention
We keep your data for as long as your account exists. When you delete your account, your data is erased from the live database immediately; residual backups expire on a rolling schedule within 30 days.
08Changes
We may update this policy as the product evolves. Continued use after changes take effect means you accept the updated policy.
09Google user data (Gmail)
If you connect Gmail, we request two permissions: gmail.send, used only to send claim letters you individually approve, from your address; and gmail.readonly, used only to find order and receipt emails (via targeted searches such as Gmail's purchases category) and extract the purchase details. We store the extracted purchase, a copy of the matched order email as your proof, and an encrypted refresh token — never your mailbox. We extract only the specific purchase fields we need (item, price, date, retailer, order and warranty details) and save the matched order email as your proof of purchase — we do not warehouse the raw text of your other messages. Gmail data is never used for advertising, never sold, never used to train AI models, and never read by humans except with your explicit permission, for security purposes, or where the law requires. You can disconnect anytime in Settings, which deletes the credential, or revoke access at myaccount.google.com. Owed's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
10AI processing
Receipt images, order-email text, and claim context are sent to OpenAI's API to extract purchase data and draft letters. This processing is transient: our API agreements do not permit our AI providers to use your content to train their models. We keep only the structured results — items, drafts, and suggestions — in your account.