Legal
Privacy Policy
Last updated 27 September 2026
GPay Cost Analyzer turns the payment alert emails in your Gmail into a private spending dashboard. This policy explains exactly what we read, what we keep, and how to remove it.
What we access
When you sign in with Google, we request:
- Your name, email address, and profile picture — to create your account and show who is signed in.
- Read-only Gmail access (
gmail.readonly) — to find bank payment alert emails (currently HDFC Bank UPI alerts) and read the transactions in them.
We only search for messages from bank alert senders. We never send, delete, label, or modify any email, and we do not read your other mail.
How we use it
The text of each matching alert email is sent to Google's Gemini API to extract the amount, receiver, and date, and to assign a spending category. Those transactions power your dashboard, charts, and filters.
We do not sell your data, use it for advertising, or share it with anyone except the service providers listed below that are needed to run the app.
What we store
- Your account details (name, email) and your Google connection status.
- Extracted transactions and your category settings.
- A processing log of recent alert emails and the extraction result, kept so the developer can diagnose and fix misclassified transactions.
We do not store your Google password. Google access tokens are held by our sign-in provider and are never exposed to your browser.
Service providers
- Clerk — sign-in and account management.
- Cloudflare — API hosting and database/storage for your transactions.
- Google — Gmail API access and Gemini API for transaction extraction.
- Vercel — hosting for this website.
Google API Services disclosure
GPay Cost Analyzer's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the spending dashboard you see, and is never used to train general-purpose AI models.
Deleting your data
You can stop Gmail access at any time from your Google Account permissions page. To delete your account and every transaction we hold, email abhinavmohan12@gmail.com from the address you signed in with — we delete it within 30 days.
If you decline Gmail access during sign-up, your sign-up is cancelled and your account details are deleted immediately.
Contact
Questions about this policy? Email abhinavmohan12@gmail.com.