Privacy Policy

PropReceipt is a receipt and expense tracking tool for property managers. The app is available at https://receipt-portal-eta.vercel.app. Users sign in through a secure portal link.

This policy explains what information we collect, why we collect it, and how you can ask us about it.

We collect only what we need to run the service:

• Your name and email address when you sign in with Google.
• Property addresses you enter so expenses can be organized by property.
• Gmail read access so we can find receipt emails and extract vendor names, totals, and order numbers.

We use this information to create your account, parse receipt emails, categorize expenses, and show them to you in the PropReceipt portal.

We do not sell your data. We do not share it with third parties for advertising or other unrelated purposes.

PropReceipt connects to Gmail so it can automatically parse and categorize receipt emails. We request the Google OAuth scope https://www.googleapis.com/auth/gmail.modify. We use this scope to read receipt emails and mark them as processed after we have handled them.

Gmail data is used only to parse receipts. We do not use Gmail content for ads, and we do not share Gmail data with third parties.

PropReceipt’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Account information, property details, and parsed receipt data are stored in Supabase, a hosted database and authentication provider. We apply the following protections to safeguard this data:

• Encryption in transit: All data transmitted between your browser, our servers, and Supabase is encrypted using HTTPS/TLS.
• Encryption at rest: Data stored in our database is encrypted at rest by our infrastructure provider.
• Access controls: Row-level security policies restrict each user's data so that only that user can access their own account, property, and receipt information. Our internal access to production data is limited to what is necessary to operate and support the service.
• Gmail data handling: Email content accessed via the Gmail API is used to extract receipt details (vendor, amount, date, order number) and to store the original receipt email as HTML so you can view it later in your dashboard. We do not use Gmail content for any purpose beyond providing this receipt-tracking feature to you.
• Credential storage: OAuth tokens used to access your Gmail account are stored securely and are never exposed to other users or third parties.

Access to stored data is limited to operating the PropReceipt service.

We keep your account, property, and parsed receipt information while your account is active so you can review expenses over time. If you close your account or ask us to delete your data, we will remove it from our systems except where we must keep a limited record to meet legal or security obligations.

You can ask us to explain what data we hold, correct inaccurate details, or delete your information. You can also disconnect Google access at any time through your Google account settings. To make a request, email us at the address below.

Questions about this policy or your data can be sent to joinsigmaproperty@gmail.com.