Privacy Policy

Last updated: December 2024

Privacy Commitment

ForwardCents is built with the belief that your financial data is not a product to be sold. This policy explains how we collect, use, and protect your information.

Information We Collect

Account Information

  • Your name and email address (via Google OAuth)
  • Basic profile information from your Google account
  • Your unique ForwardCents email address

Expense Data

  • Receipt emails you forward to your ForwardCents address
  • Extracted expense information (vendor, amount, date, category)
  • PDF attachments from your forwarded emails

Usage Information

  • How you interact with our service
  • Error logs and technical diagnostics
  • Email processing status and timestamps

How Your Information is Used

  • Process your expenses: Extract data from receipt emails and organize them in your dashboard
  • Improve the AI: Enhance extraction algorithms (using anonymized data only)
  • Provide support: Help you with technical issues and questions
  • Secure your account: Detect and prevent unauthorized access

Privacy by Design

PII Removal

Before processing emails with AI, we automatically remove personally identifiable information including:

  • Your name and address
  • Credit card numbers
  • Phone numbers and other personal identifiers

Email Handling

  • Original emails are processed and then permanently deleted
  • Only extracted expense data (vendor, amount, date) is stored
  • PDF receipts are stored securely for your reference

Data Sharing and Disclosure

Your data will never be sold to third parties.

Your information may be shared only in these limited circumstances:

  • With your consent: When you explicitly authorize sharing
  • Legal requirements: When required by law or to protect rights
  • Service providers: With trusted partners under strict privacy agreements

Current service providers:

  • Cloudflare (hosting and infrastructure)
  • Google (authentication)

Data Security

  • All data encrypted in transit and at rest
  • User data isolated — you can only access your own expenses
  • Regular security audits and monitoring
  • Secure cloud infrastructure with Cloudflare Workers

Your Rights

  • Access: View all data we have about you
  • Edit: Correct any expense information
  • Delete: Permanently delete your account and all data
  • Export: Download your expense data (coming soon)
  • Control: Choose which emails to forward and process

Data Retention

  • Account data: Retained while your account is active
  • Expense data: Retained until you delete it or close your account
  • Original emails: Processed and immediately deleted
  • Deleted data: Permanently removed within 30 days

Changes to This Policy

This policy may be updated from time to time. You will be notified of material changes by email or through the service. Continued use after changes take effect constitutes acceptance.

Contact

Questions about this policy or how your data is handled:

For details on our technical security measures, see our Security & Privacy page.