What we collect
- Account information — name and email address when you sign up.
- Mailbox access tokens — encrypted OAuth refresh tokens for the Gmail or Outlook accounts you connect. Used solely to read email for invoice extraction. We never store your password.
- Email content (read-only) — message metadata (subject, from, date), body, and attached PDFs of messages matching invoice-like patterns. We never send, modify, or delete email.
- Extracted invoice data — structured fields parsed from those emails (vendor, amount, tax ID, etc.) plus the original PDF attachments.
- Billing information — if you subscribe, Paddle (our Merchant of Record) processes payment and handles tax. We never see your card number; we receive a customer ID and subscription status.
How we use it
Email content is read solely to identify invoices and receipts. Extracted data is shown to you on your dashboard, in reports, and in exports. We do not sell your data, share it with advertisers, or use it to train AI models.
Third parties we use
- Anthropic (Claude) — invoice extraction. Email body and PDF content are sent for parsing into structured fields. Anthropic's data-use terms apply; per their policy, API data is not used for model training.
- Google / Microsoft — OAuth providers for mailbox access. We request the minimum scopes needed (
gmail.readonly / Mail.Read). - Paddle — payment processing (Merchant of Record) for paid plans, including global tax compliance.
- Vercel — application hosting and serverless functions.
- Turso — managed SQLite database for your account, invoice records, and tokens.
- Vercel Blob — storage for invoice PDF attachments.
- Resend — transactional email (verification, password reset).
- Sentry — error monitoring (does not receive your email content or invoice data).
Limited Use of Google user data
Well Receipt's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data only to provide and improve the invoice- and receipt-extraction features you see in the app.
- We do not transfer or sell Google user data to third parties for advertising, marketing, or any other unrelated purpose.
- We do not use Google user data to develop, improve, or train generalized or non-personalized AI and/or ML models. Email content sent to Anthropic (Claude) is processed solely to extract your invoice data and is not used by Anthropic for model training.
- No humans read your Google user data except: with your explicit consent (e.g. a support request you initiate), where necessary for security or to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.
Data security
OAuth refresh tokens are encrypted at rest using AES-256-GCM with a key held in our environment, not the database. All traffic between you, us, and our subprocessors is over TLS. We use the minimum email scope a provider offers — read-only access only, no send / modify / delete permissions.
Retention
We keep your extracted invoices, PDFs, and account data until you delete your account. Account deletion removes all of the above within 30 days, except where retention is legally required (e.g. records of paid subscriptions for tax purposes).
Your rights
You can access, export, or delete your data at any time from the in-app settings, or by emailing support@wellreceipt.com. Residents of the EU/UK have additional rights under GDPR; residents of California have rights under CCPA; we honor those requests for all users.
Contact
Questions, requests, or complaints: support@wellreceipt.com.
Operator: Sadara Studio, Riyadh, Kingdom of Saudi Arabia.