Privacy Policy
Information processed
After the operator grants Google OAuth consent, Budget GPT reads the Gmail messages that its application configuration selects for bank-notification processing. It may process message headers, sender, subject, date, message body, and raw message content, including attachments if a selected message contains them, in order to identify transaction notifications. It stores the original processed message and the derived transaction information, such as merchant, date, amount, currency, and budget category.
Why it is processed
This information is used solely to build the operator’s personal transaction ledger, categorise spending, and show budget summaries. Budget GPT does not send Gmail messages, delete messages, alter labels, sell data, use advertising trackers, or use the data to train public models.
Where information is stored and disclosed
Processed messages and derived budget records are stored on a private virtual server operated for Budget GPT. Google provides the Gmail API and receives the OAuth authorization request. Information is not intentionally shared with advertisers, analytics providers, or other users.
Retention and deletion
Records remain in the private service until the operator deletes them. This MVP does not create automated backups. The operator can revoke Google access from their Google Account and can request deletion of Budget GPT data by contacting the address below.
Security
Budget GPT uses HTTPS for data in transit, authenticated access for its private API, and restricted server access. No system can guarantee absolute security; access credentials should be kept private and Google access should be revoked if it is no longer needed.
Changes
This policy may be updated when the service changes. The date at the top of this page reflects the latest revision.
Contact
For privacy questions or deletion requests, contact fws8787@gmail.com.