Privacy policy

svgTAX is a personal, owner-operated automation that helps organize digital receipts and tax-supporting records. This policy describes how the application accesses and processes data when its operator connects a Google account and other authorized services. The application does not offer public account registration.

1. Information accessed

Depending on the permissions granted and workflows enabled, svgTAX may access:

• Gmail: selected receipt emails, including sender, subject, message content, dates, and attachments relevant to receipt processing.
• Google Drive: folders and files used for storing and organizing receipt documents.
• Google Sheets: spreadsheet rows used for transactions, duplicate detection, review queues, document records, and audit logs.
• Connected document sources: receipt files and file metadata supplied through services such as Dropbox.

2. How information is used

Data is used to identify and organize receipts, extract details such as merchant, date, amount and description, suggest expense categories, detect duplicates, route uncertain items for review, file supporting documents, and maintain audit records. Selected receipt content may be processed by locally hosted AI models configured by the operator. Automated classifications do not by themselves establish tax deductibility.

3. Where information is stored

Records and receipt files may remain in the connected Gmail, Google Drive, Google Sheets, or Dropbox accounts and in the operator's self-hosted n8n environment, including operational logs and configured backups. Data storage depends on which workflows the operator enables. This public informational website does not display receipt content or credentials.

4. Sharing and transfers

Google user data is used to provide the receipt-automation functionality requested by the account owner, not for targeted advertising or the sale of personal information. Data may be transferred among the connected services authorized and configured by the owner for filing, tracking, or review. Locally configured AI processing may receive receipt text within the operator's own environment. Access by service providers is governed by the owner's configuration and those providers' applicable terms.

5. Retention and deletion

Receipt documents, spreadsheet entries, email records, and execution logs are retained according to the operator's configured workflows, account settings, and backup policies. The operator can review and delete records through the relevant connected services and the self-hosted automation environment. Deleting a record from one system may not delete copies in another system or existing backups.

6. Controls and security

Google access is granted through OAuth permissions chosen during authorization. The owner may revoke access at any time through their Google Account's third-party connections settings. The application is designed for restricted, owner-managed access; access controls, token handling, and local server security depend on its deployed configuration. No system can guarantee absolute security.

7. Google API Services

Information received from Google APIs is used only for the described receipt and document-management functionality and is subject to the Google API Services User Data Policy, including applicable Limited Use requirements. The application is not intended to use Google user data for advertising or unrelated profiling.

8. Changes

This policy may be updated if the connected services, processing practices, or retention arrangements change. The current version will be posted on this page with an updated effective date.

9. Contact

For questions, data requests, or permissions concerns, contact the svgTAX operator at [email protected].