Privacy Policy

Signing in creates an account record held by our authentication infrastructure. It holds the email address you sign in with and the ordinary metadata of an account, such as when it was created and when it was last used.

Money Left Behind also stores a workspace record linked to your account. It contains identifiers, timestamps and operational state used to run and coordinate the service.

Nothing is read from a provider until you connect it. When you connect a supported provider, Money Left Behind accesses and processes provider data used for the features described below.

Gmail. For a connected mailbox, Money Left Behind stores the mailbox address and the permissions that were granted. For the messages it examines it stores a fixed set of header fields — sender, recipients, reply-to, subject, date, and the identifiers that place a message in its conversation — together with the short preview text Gmail returns, Gmail’s own message and conversation identifiers, label identifiers, a size estimate and timestamps. Message bodies are not stored. When a message has to be looked at more closely, its text is fetched at that moment, used for that one check, and not written to our database.

Stripe. Money Left Behind stores invoice records: the Stripe account and invoice identifiers, the invoice status, currency, the amounts due, paid and outstanding, credit-note amounts, whether a payment is still open, and the relevant dates.

QuickBooks. Money Left Behind stores invoice records: the company and invoice identifiers, the due date, the currency and the amounts needed to establish whether an invoice is overdue and by how much.

What it surfaces. An item shown to you is stored as a short summary, a suggested next step, an optional amount and currency, a confidence level, its current state, and references back to the data it was derived from.

The access and refresh tokens Money Left Behind uses to reach a connected provider are encrypted before they are stored. They are never displayed in the product and are never returned to your browser.

When you disconnect a source, Money Left Behind removes or invalidates the stored credential it uses for that connection. Where the provider supports the revocation flow used by Money Left Behind, it also asks the provider to revoke the credential. Once the stored credential has been removed or invalidated, Money Left Behind can no longer use it to access that provider on your behalf.

Gmail access is read-only. Money Left Behind cannot send, reply to, alter or delete anything in your mailbox.

Gmail data is used for one purpose: to identify customer and sales conversations in your own workspace that may still be waiting for a reply, and to show them to you. It is not used for advertising, it is not sold, and it is not used to build a profile of anybody.

Message text is only passed to an AI provider where you have explicitly turned on AI Analysis for that connected mailbox, as described below. With AI Analysis off, message text is not sent to OpenAI.

Money Left Behind’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI Analysis is off unless you turn it on for a connected mailbox, and you can turn it off again at any time.

When AI Analysis is enabled, the subject and message text of eligible Gmail messages may be sent to the OpenAI API so that the message can be classified. Attachments are never sent, and long text is shortened before it is sent. The request is sent to the OpenAI Responses API with store set to false. OpenAI states that API inputs and outputs are not used to train its models by default unless the customer opts in. Under OpenAI’s default API data controls, abuse-monitoring logs may contain customer content and may be retained for up to 30 days unless additional retention controls apply.

What comes back is a classification, and that is what Money Left Behind stores: a category, the kind of request it appears to be, whether a reply seems to be expected, a confidence level, a short summary of at most 240 characters, and — only where the message states one outright — a stated value and currency. The message text that was sent for classification is not stored.

The classification decides whether an item is shown to you. It does not decide anything about your business, and nothing is sent to a customer as a result of it.

Money Left Behind runs on services operated by others: Supabase for the application database and authentication, Vercel for hosting, Cloudflare for the domain, DNS and the routing of our support address, and — only for the AI analysis described above, and only when it is enabled — OpenAI.

We do not make a promise here that any particular record will be stored in a specific geographic location.

Operating a service produces ordinary technical records. The infrastructure providers named above process request, account, network and authentication metadata as part of running their services and keeping them secure.

The Money Left Behind application itself does not write your message content, your provider data or provider responses into its own logs.

You can ask for your account and the data Money Left Behind holds for it to be deleted, by writing to support@moneyleftbehind.app.

There is no automatic self-service delete control in the product today. Requests are handled by a person, and we may need to confirm that a request really comes from the account holder before doing something irreversible. We do not state a fixed completion time here, because no such policy has been set.

Deletion covers what Money Left Behind holds. It cannot reach records that a connected provider keeps under its own terms, or records that a legal obligation independently requires to be retained.

If this policy changes materially, the updated version will appear on this page with a new effective date.