Privacy Policy
Your data powers Owed and stays under your control. We don't run ads, we don't sell your personal information, and you can export or erase your account from Settings anytime.
01What we collect
Your email, display name, and language; items, receipts, and notes in your ledger; claims and correspondence; plan and billing status; and, if you connect Gmail, your Gmail address, an encrypted send/read credential, and the purchase details we extract from order emails.
02How we use it
To run your ledger, watch deadlines, draft, send, and track claims, and process billing. Receipt images, order emails, and claim text are processed by our AI provider (OpenAI) solely to extract purchase details and draft letters on your behalf; our AI providers are contractually barred from training their models on this data.
03Sharing
We share data only with vendors that help us operate the product (hosting, AI processing, email delivery, payments), under contracts limiting their use to providing services to us. We don't use your information for advertising and we never sell it. We may disclose data if the law requires it, to protect the service or users, or as part of a merger or acquisition — in which case this policy continues to apply. We may use aggregated data that cannot identify you to run and improve Owed, as described in “Aggregated insights” below.
04Storage and security
Data lives in Supabase (Postgres) with row-level security, so your rows are only readable by your authenticated session. Receipts and proofs live in private storage buckets. Gmail credentials are stored encrypted (AES-256-GCM) and are decrypted only server-side at the moment of use. No system is perfectly secure, but access is minimized by design.
05Payments
Subscriptions are processed by Stripe. Your card details go directly to Stripe — we never see or store full card numbers.
06Your rights
Export everything you've ever put into Owed as JSON, or delete your account — ledger, claims, receipts and all — from Settings. Deletion is immediate and irreversible. You can also write to us to exercise any data right your jurisdiction grants.
07Retention
We keep your data for as long as your account exists. When you delete your account, your data is erased from the live database immediately; residual backups expire on a rolling schedule within 30 days.
08Changes
We may update this policy as the product evolves. Continued use after changes take effect means you accept the updated policy.
09Google user data (Gmail)
If you connect Gmail, we request two permissions: gmail.send, used only to send claim letters you individually approve, from your address; and gmail.readonly, used only to find order and receipt emails (via targeted searches such as Gmail's purchases category) and extract the purchase details. We store the extracted purchase, a copy of the matched order email as your proof, and an encrypted refresh token — never your mailbox. We extract only the specific purchase fields we need (item, price, date, retailer, order and warranty details) and save the matched order email as your proof of purchase — we do not warehouse the raw text of your other messages. Gmail data is never used for advertising, never sold, never used to train AI models, and never read by humans except with your explicit permission, for security purposes, where the law requires, or where it has been aggregated across many members for our internal operations. You can disconnect anytime in Settings, which deletes the credential, or revoke access at myaccount.google.com. Owed's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
10AI processing
Receipt images, order-email text, and claim context are sent to OpenAI's API to extract purchase data and draft letters. This processing is transient: our API agreements do not permit our AI providers to use your content to train their models. We keep only the structured results — items, drafts, and suggestions — in your account.
11Aggregated insights
Three different rules apply to the data in Owed, so it is worth being plain about which is which. Purchases extracted from your Gmail are the most tightly restricted: Google’s Limited Use requirements govern them, and apply equally to anything derived from them — including aggregates. Purchases you type in or photograph are governed by this policy alone. Company policy terms — the warranty and return documents we fetch from brands’ own public websites — contain nothing about you at all; they are public commercial information, and our public warranty pages are built from them. When we study usage to improve Owed — which brands leave people with the least recourse, which claims succeed, where the product loses people — we work from aggregates covering many members at once, with small groups suppressed so that no figure can be traced back to one person. We never sell any of it, and we never use it for advertising.