Privacy

Who we are

Spend2Sheet reads receipts, invoices and bills that you send us, and writes the details into a Google Sheet in your own Google Drive, with the original file saved to a folder in that same Drive.

If you have a question about anything here, write to hello@spend2sheet.online.

What we access in your Google account

When you connect Google, we ask for exactly these permissions and nothing more:

• Your name, email address and profile picture — so we can sign you in and show you which account you are using.
• Permission to create and manage only the files Spend2Sheet creates in your Drive (the drive.file scope). This is a per-file permission. It lets us create your Spend2Sheet folder and your financial-year spreadsheet, and write to them afterwards. It gives us no ability to see, list, open or search any other file in your Drive — including files we did not create.

If you choose a specific folder to put Spend2Sheet inside, we gain access only to that folder for the purpose of creating our folder within it. We still cannot read the files that were already in it.

We do not request access to Gmail, Contacts, Calendar, Photos, or your wider Drive, and we have deliberately designed the product so that we never need to.

What we store

Your Google Sheet and your Drive folder are the real home of your records. Our database is an index and a work queue on top of them. It contains:

• Your account — email address, name, profile picture.
• Your settings — currency, financial year, time zone, language, and the columns you have configured.
• Your Google connection — an encrypted token that lets us keep writing to your sheet without asking you to sign in every time, plus the identifiers of the folder and spreadsheet we created.
• A copy of each expense we extract — vendor, amount, currency, date, category, and any other columns you have set up, along with a link to the file in your Drive.
• Operational records — which writes succeeded or failed, so nothing is lost when Google is unavailable, and an audit trail of changes to your expenses.

We are explicit about that fourth item because it matters: we hold a real copy of your expense data. We keep it so that duplicate detection works without re-reading your entire spreadsheet, so that search across years is fast, and so that undo is possible. If we did not, the product would be slower and less reliable — but you should know it exists rather than discover it later.

Receipt files and extracted text

When you send a receipt, the file is held briefly on our servers while we read it and upload it to your Drive. It is deleted from our storage within 24 hours of reaching your Drive successfully. Your Drive keeps the only lasting copy.

The raw text we read out of a document is discarded once the expense details have been extracted. You can opt in to letting us keep it, in Settings, if you want us to be able to investigate a bad extraction — but this is off unless you turn it on.

How we use AI

We use AI models to read receipts and pull out the details. The document is sent to our model provider solely to produce that result.

Your data is never used to train AI models — ours or anyone else’s. We route these requests with zero data retention, so the provider does not keep your document after returning the extraction.

Limited use of Google user data

Spend2Sheet’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not transfer Google user data to third parties except as necessary to provide the service, we do not use it for advertising, we do not sell it, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with the law, or where the data is aggregated and anonymised.

Who else processes your data

We use a small number of providers to run the service. Each sees only what it needs to:

• Vercel — hosting and temporary file storage.
• Neon — the database described above.
• Our AI model provider — receives the receipt in order to extract its details, with zero retention.
• Google — your own Drive and Sheets, on your behalf.

We do not sell your data to anyone, for any purpose, ever.

Deleting your data

You can delete your account at any time from Settings. When you do, we revoke our access to your Google account and delete our copy of your data.

Your folder and spreadsheet stay in your Drive. They are yours, they always were, and deleting your Spend2Sheet account does not touch them. If you want them gone too, delete them in Drive.

You can also disconnect Google without deleting your account, which stops all further access immediately. Revoking access from your Google account settings has the same effect.

Security

Google access tokens are encrypted before they are stored, and are never sent to your browser or written to our logs. All traffic is over HTTPS. Access to production systems is limited and audited.

No system is perfect. If you believe you have found a security problem, please write to security@spend2sheet.online and we will respond quickly.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you. Your expense data is already in your own spreadsheet, so export is generally a matter of opening it — but write to us and we will help with anything else.

Children

Spend2Sheet is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes to this policy

If we change what we collect or how we use it, we will update this page and change the date at the top. For anything significant, we will tell you directly rather than relying on you to check.