Privacy Policy

Dueolert is a consumer financial intelligence platform operated by Ved Prajapati, a sole trader based in Watford, UK. For the purposes of the UK General Data Protection Regulation (UK GDPR), we are the data controller of your personal data.

When you connect Gmail, we collect: (1) your Google account information (name, email address, profile picture); (2) the subject lines and snippets of emails that look financial or administrative (bills, invoices, receipts, subscription notices, renewal reminders, refund confirmations) — we only fetch the full body of emails that pass this relevance check; and (3) the structured data we extract (merchant names, amounts, dates, payment methods). We never ask for your email password.

We use your data to: (1) extract and structure your financial information; (2) generate your personal financial dashboard; (3) detect price increases, upcoming renewals and potential savings; and (4) improve extraction accuracy. Extraction is deterministic pattern matching on our own servers — no email bodies are sent to an AI provider. Hosting, database, identity, billing and optional notification providers process the data needed to operate the service. We do not use your data for advertising and we do not sell it.

Before extraction, pattern matching masks common email addresses, UK phone numbers, postcodes, account and card identifiers, and greeting names on our servers. It cannot guarantee removal of every personal detail. Email bodies are processed in memory and are not stored by the extraction pipeline.

You have the right to: (1) access the personal data we hold about you; (2) correct inaccurate data; (3) request deletion; (4) object to or restrict processing; (5) data portability (structured, machine-readable format); and (6) withdraw consent at any time. To exercise any of these rights, contact us at hello@dueolert.com. We will respond within 30 days.

Settings → Data clears derived financial records without removing your account or billing subscription. Settings → Account permanently deletes the application account and stored OAuth credentials after cancelling Dueolert billing. Neither action deletes messages from Gmail. Operational run metadata and delivered notification records expire after 30 days. Encrypted backups and provider billing records follow their separate retention schedules; contact us for details.

Data is encrypted in transit and at rest, access follows least-privilege principles, and Gmail access uses read-only OAuth scopes you can revoke at any time — from our Settings page or your Google account.

We do not transfer your data outside the UK and European Economic Area unless the destination is deemed adequate or appropriate safeguards (such as Standard Contractual Clauses) are in place.

If you believe we have mishandled your data, you can complain to the Information Commissioner's Office (ICO) at https://ico.org.uk or on 0303 123 1113.

For privacy questions or to exercise your rights, contact us at hello@dueolert.com.