Privacy Policy — DataPeel

1. Overview

DataPeel ("we", "us", or "our") is a document processing platform operated by Avantrix Intelligence. This Privacy Policy explains how we collect, use, and protect information when you use our service at datapeel.io.

2. Information We Collect

Account information

Your email address and password when you create an account.

Documents you upload

Invoices, receipts, purchase orders, and other documents you submit for processing. These are stored securely in Supabase Storage and used solely to extract structured data on your behalf.

Connected service credentials

OAuth tokens for services you connect (Google Drive, Gmail, Google Sheets, QuickBooks). These tokens are stored encrypted in Supabase Vault and are only used to perform actions you configure.

Usage data

Submission history, credit usage, and workflow configuration. We do not use third-party analytics trackers.

3. How We Use Your Information

To extract structured data from documents using AI (Anthropic Claude)
To push extracted data to destinations you configure (QuickBooks, Google Sheets, Google Drive)
To monitor inboxes or folders you connect for new documents, per your workflow settings
To manage your account, billing, and credit balance
To send transactional emails related to your account (no marketing without consent)

4. Third-Party Services

DataPeel uses the following third-party services to operate. Each has its own privacy policy.

SupabaseDatabase, authentication, file storage, and secret vault

Anthropic (Claude)AI document extraction

StripePayment processing and billing

RailwayBackend hosting

VercelFrontend hosting

Google APIsGmail, Google Drive, and Google Sheets integrations (only when you connect them)

Intuit (QuickBooks)QuickBooks integration (only when you connect it)

5. Data Retention

Uploaded documents and extracted data are retained for as long as your account is active. You can delete individual submissions at any time. When you disconnect a connector, its OAuth tokens are deleted immediately. When you close your account, all associated data is deleted within 30 days.

6. Data Security

All data is encrypted in transit (TLS) and at rest. OAuth credentials are stored in Supabase Vault using envelope encryption. We do not store payment card details — payments are handled directly by Stripe.

7. Gmail and Google Data

When you connect Gmail, DataPeel accesses your inbox solely to find emails with invoice attachments matching filters you configure. We read attachment content to extract structured data, and optionally mark emails as read after processing. We do not read email body text, store email content beyond the extracted data, or use your Gmail data for any purpose other than the workflow you configure. DataPeel's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

8. Your Rights

You can request access to, correction of, or deletion of your personal data at any time by contacting us. You can disconnect any integration from the Connectors page, which immediately revokes our access to that service.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of DataPeel after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Reach us at jduppstadt@avantrixintelligence.com