Privacy Policy

Dueolert is a consumer financial intelligence platform operated by Ved Prajapati, a sole trader based in Watford, UK. For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller of your personal data.

When you connect Gmail, we collect: (1) your Google account information (name, email address, profile picture); (2) the subject lines and snippets of emails that look financial or administrative — we only fetch the full body of emails that pass this relevance check; and (3) the structured data we extract (merchant names, amounts, dates, payment methods). We never ask for your email password.

We use your data to: (1) extract and structure your financial information; (2) generate your dashboard; (3) detect price increases, renewals and savings; and (4) improve extraction accuracy. Extraction is deterministic pattern matching on our own servers — no email bodies are sent to an AI provider. Hosting, database, identity, billing and optional notification providers process the data needed to operate the service. No advertising, no sale of data.

Before extraction, pattern matching masks common email addresses, UK phone numbers, postcodes and account identifiers. It cannot guarantee removal of every personal detail. Email bodies are processed in memory and are not stored by the extraction pipeline.

You have the right to: (1) access your data; (2) correct inaccuracies; (3) request deletion; (4) object to or restrict processing; (5) data portability; and (6) withdraw consent at any time. To exercise these rights, contact us at hello@dueolert.com. We respond within 30 days.

Settings → Data clears derived financial records. Settings → Account permanently deletes the application account and OAuth credentials after cancelling Dueolert billing. Gmail messages are unaffected. Operational run metadata and delivered notification records expire after 30 days. Encrypted backups and provider billing records have separate retention schedules; contact us for details.

Data is encrypted in transit and at rest, access follows least-privilege principles, and Gmail access uses revocable read-only OAuth scopes.

We do not transfer your data outside the European Economic Area unless the destination is deemed adequate by the European Commission or safeguards such as Standard Contractual Clauses are in place.

You can complain to your local Data Protection Authority — see https://edpb.europa.eu for the list.

Privacy questions or rights requests: contact us at hello@dueolert.com.