This Privacy Policy is maintained by GapChase to explain how we handle personal data when you use the service. It is not an independent certification or legal opinion. If you have questions, contact us at support@gapchase.com.
What GapChase does
GapChase reads the bank statements you upload, searches your Gmail for matching invoices or receipts, downloads the attachments, and organises them into folders. It also flags transactions where no matching evidence can be found. Higher-tier plans can continuously watch Gmail for expected receipts.
What data we collect
- Account data: email address and name from your Google account when you sign in.
- Statement data: the contents of the bank statements you upload, including transaction dates, descriptions and amounts.
- Gmail data: sender, subject, date, body snippet and attachment metadata for emails we believe may match a transaction. We only read emails; we never send email on your behalf.
- Evidence files: PDF or image attachments we download as part of the matching process.
- Usage data: waitlist form submissions, plan selections and page visits collected to understand interest and improve the product.
How we use your data
- To provide the receipt-matching service you signed up for.
- To improve matching accuracy and fix errors.
- To communicate with you about your account, updates or support requests.
- To enforce limits based on your chosen plan.
- To keep the app secure and investigate abuse.
Gmail and Google services
GapChase uses Google Sign-In, Gmail (read-only) and optionally Google Drive. We request the minimum scopes needed: we cannot send email, delete messages, or access files in Drive that GapChase did not create. You can revoke access from your Google Account permissions page at any time.
How we store and protect data
Data is hosted by Lovable Cloud (Supabase) with encryption in transit and at rest. Your statements, transactions and evidence are scoped to your account and protected by Row Level Security. Only you — and GapChase administrators when strictly necessary for support — can access your data.
How long we keep data
We keep your statements, transactions and matched evidence for as long as your account is active so you can access your records. You can request deletion of your data or your entire account by emailing support@gapchase.com. Some data may remain in backups for a short period before being permanently removed.
Cookies and analytics
We use essential cookies and local storage to keep you signed in and remember your preferences. We do not use third-party advertising or tracking cookies. Page-visit and waitlist data is stored only to measure interest in the product.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or export your personal data. To exercise these rights, email support@gapchase.com.
Subprocessors and integrations
We rely on the following service providers to run GapChase:
- Lovable Cloud / Supabase — authentication, database and storage.
- Google Cloud — sign-in, Gmail search and Google Drive sync.
- Vercel / Lovable hosting — serving the web application.
Changes to this policy
We may update this Privacy Policy as the product changes. We will post the new version here with an updated date. Continued use of GapChase after changes means you accept the revised policy.
Contact us
For privacy questions or data requests, email support@gapchase.com.