Privacy Policy

1. Who we are

ExpenseCatcher is operated by AffZero LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States (“we”, “us”). For the personal data described here we are the controller (in California terms, the “business”). Questions and requests: hello@expensecatcher.com.

When a business uses ExpenseCatcher to process documents that contain other people’s data — for example a bookkeeper forwarding a client’s supplier invoices — that business is the controller of that content and we process it on its behalf under our Data Processing Addendum.

2. What we collect

We don’t store the body of forwarded emails in our database. It is processed in memory while the catch runs. The one exception is an email that arrives after your monthly catches are used up: we keep that whole email, encrypted, in our private storage until it can be processed, for at most 30 days, then delete it. If a receipt has no attachment, we may open the email’s “View invoice” link (you can turn this off in Settings) and, when you have a “Save to Drive” or “Forward” step, save that invoice page — or the email itself — as a PDF to your Drive. Our encrypted copy of that PDF is kept for the same period as other originals.

3. How we use it, and our legal bases

The GDPR requires a legal basis for each use. Here are ours:

We only send marketing emails if you opt in, and every one has an unsubscribe link.

4. Google user data

We request a single Google API permission, drive.file. It lets ExpenseCatcher create, see and edit only the files and folders it creates and the files you explicitly pick in Google’s file picker. We cannot list, search or read anything else in your Drive. We use this access only to create the folders and spreadsheets your catchers write to, upload forwarded receipts into the folder you chose, and add or update the matching rows in the spreadsheet you chose.

ExpenseCatcher’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we use Google user data only to provide and improve the features you use in ExpenseCatcher;
• we transfer it to others only as needed to provide those features (see the providers below), to comply with the law, or as part of a merger or acquisition with your consent;
• we do not use or transfer it for advertising, and we do not sell it;
• we do not use it to develop, improve or train generalised AI or machine-learning models;
• no person reads it unless you ask us to (for example in a support request), it is needed for security or to investigate abuse, the law requires it, or it has been aggregated and anonymised for internal operations.

Your Google token is encrypted with AES-256-GCM before it is stored. You can revoke our access from Settings or at myaccount.google.com/permissions.

5. How we use AI

To read a receipt, we send that receipt’s text or file — with its subject and sender — to Anthropic’s Claude API, which returns the fields listed above. Anthropic processes it as our service provider, does not use API data to train its models, and deletes it within 30 days unless it must keep it longer to enforce its usage policy or comply with the law. If AI reading is unavailable, we fall back to pattern matching on our own servers.

AI reading only fills in data for you to review; it makes no decisions about you and has no legal or similar effect, so no automated decision-making in the sense of Article 22 GDPR takes place. Every result is labelled and can be corrected. More on the Security, data & AI page.

6. Who we share it with

We use these providers to run ExpenseCatcher. Each may only use the data to provide its service to us:

Paddle acts as merchant of record for paid plans and is an independent controller of the payment data it collects under its own privacy notice. Beyond these providers, we share data only:

• with the people and services you choose — forwarding and notification addresses and webhook URLs in your steps;
• when the law requires it, or to protect the rights, safety and property of our users, the public or us;
• with a buyer or successor if AffZero LLC is involved in a merger, acquisition or sale of assets — we will tell you first.

We do not sell personal data. We do not “share” it for cross-context behavioural advertising (as the CCPA uses that term) unless you switch on marketing cookies, which you can switch off at any time.

7. International transfers

We are based in the United States and our providers mostly process data there. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (with the UK Addendum and Swiss amendments) and, where a provider is certified, the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. Ask us for a copy of the relevant safeguards.

8. How long we keep it

If a Free account sees no sign-ins or catches for 24 months, we may delete it after emailing you at least 30 days in advance.

9. Security

Data is encrypted in transit (TLS) and at rest by our providers. On top of that we encrypt Google tokens and stored receipt files ourselves with AES-256-GCM, using keys kept outside the database. Database access is restricted per user, browsers cannot write to the database directly, and catch addresses carry random parts so they can’t be guessed. Details on the Security, data & AI page. If a breach affects your personal data, we will tell you and the relevant authorities as the law requires, without undue delay.

10. Your rights and choices

Everyone

• Access and portability — Settings → Export my data downloads everything we hold as a JSON file.
• Correction — edit any catch in the app; edits are written back to your sheet.
• Deletion — Settings → Delete account removes your data as described above.
• Google access — disconnect from Settings or your Google account at any time.
• Cookies — change your cookie choices at any time. We honour the Global Privacy Control signal.

For anything else, email hello@expensecatcher.com. We answer within one month (45 days for U.S. state-law requests).

European Economic Area, United Kingdom and Switzerland

You have the right to access, correct and delete your personal data; to restrict or object to our processing (including processing based on legitimate interests); to data portability; and to withdraw consent at any time without affecting earlier processing. You can also complain to your local data protection authority — we would appreciate the chance to help first.

California

This section is our notice at collection and privacy policy under the California Consumer Privacy Act, as amended (CCPA).

• Categories collected in the last 12 months: identifiers (name, email, IP address, account IDs); customer records (name, contact and billing details); commercial information (your plan, and purchase records contained in receipts you forward); internet or network activity (usage and log data); and approximate location derived from IP address. Sources and purposes are described in sections 2 and 3, retention in section 8.
• Sensitive personal information: the Google credentials you connect, and any financial details that appear on receipts. We use these only to provide the Service you asked for, not to infer anything about you.
• Disclosures for a business purpose: each category above is disclosed to the service providers in section 6, only to run the Service.
• No sale; no sharing without your choice: we have not sold personal information, and do not share it for cross-context behavioural advertising unless you turn on marketing cookies. We do not knowingly sell or share data of consumers under 16.
• Your rights: to know what we collect and how we use and disclose it, to access, correct and delete it, to opt out of sale and sharing (use cookie settings or Global Privacy Control), and not to be discriminated against for exercising these rights.
• How to ask: use Settings, or email hello@expensecatcher.com from the address on your account so we can verify it is you. An authorised agent can ask for you with your signed permission; we may still ask you to confirm your identity.
• Shine the Light: we do not disclose personal information to third parties for their own direct marketing.

Other U.S. states

If you live in a state with a consumer privacy law — including Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia — you have similar rights to confirm, access, correct, delete and port your data and to opt out of targeted advertising, sale and profiling. If we decline a request, you can appeal by replying with “Appeal” within 60 days; we will answer within the time your state’s law requires, and if we deny the appeal you can contact your state attorney general.

11. Children

ExpenseCatcher is for adults and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, email hello@expensecatcher.com and we will delete it.

12. Do Not Track and Global Privacy Control

We treat a Global Privacy Control signal as a request to opt out of sale and sharing, and switch optional cookies off. “Do Not Track” has no agreed standard, so we don’t respond to it separately — but no tracking cookies are set without your consent either way.

13. Changes to this policy

If we change this policy in a way that matters, we will email you before the change takes effect and update the date at the top. Earlier versions are available on request.

14. Contact

AffZero LLC
30 N Gould St, Ste R
Sheridan, WY 82801
United States
hello@expensecatcher.com