Privacy Policy — LoonieLog

The short version: LoonieLog has no server. Your financial data never leaves your Google account. Your API keys are stored in Google's encrypted PropertiesService — never on any LoonieLog infrastructure, because none exists.

1. Who We Are

LoonieLog ("the add-on", "the software") is a Google Apps Script add-on that runs inside your Google Sheets spreadsheet. It is developed and maintained by the LoonieLog team, reachable at srivatsa.kasagar@outlook.com.

For the purposes of this policy, "we", "us", or "our" refers to the LoonieLog team. "You" or "your" refers to the individual who installs and uses the add-on.

2. What Data LoonieLog Accesses

LoonieLog is an add-on that operates entirely within your Google account. It accesses the following data using the OAuth scopes you authorize during installation:

OAuth Scope	What it's used for
gmail.modify	Read Gmail messages to find receipt emails; apply labels (e.g., "loonielog-processed") to processed threads; never reads email unrelated to receipts
gmail.settings.basic	Create Gmail filters that route receipt emails from known vendors to the To_Log label automatically
drive	Create and manage the LoonieLog_Unprocessed and archive folders; rename and move receipt files you drop into those folders
spreadsheets	Read and write to the Google Sheet where expense data is logged — the spreadsheet you own
script.external_request	Make HTTPS calls to Gemini API, Claude API (with your own key), and the Bank of Canada Valet API for exchange rates
script.scriptapp	Create a time-based trigger that runs the agent on a daily schedule
userinfo.email	Read your Google account email address for display in the Settings tab only

3. What LoonieLog Does NOT Do

LoonieLog has no server, no database, and no backend infrastructure. There is nowhere for your data to be sent to or stored by us.
We do not collect, transmit, or store your receipt data, email content, or financial information.
We do not store your Gemini or Claude API keys. They are stored in Google's PropertiesService.getUserProperties() — encrypted, user-scoped storage that only your script instance can access.
We do not share any data with advertisers or analytics services.
We do not read, scan, or process Gmail messages that are not tagged with the To_Log label (unless you explicitly run the backfill function, which searches for receipt keywords in the past 90 days).

4. Third-Party Services

LoonieLog calls the following third-party APIs on your behalf, using API keys you provide and own:

Google Gemini API (Generative Language API)

If you choose Gemini as your AI model, receipt images and email text are sent from your Google account directly to Google's Gemini API endpoint (generativelanguage.googleapis.com). This data is governed by Google's Generative AI Terms of Service and its Privacy Policy. LoonieLog does not intermediate or store this data.

Anthropic Claude API

If you choose Claude as your AI model, receipt images and email text are sent from your Google account directly to Anthropic's API endpoint (api.anthropic.com). This data is governed by Anthropic's Privacy Policy. LoonieLog does not intermediate or store this data.

Bank of Canada Valet API

For USD receipts, LoonieLog calls the Bank of Canada's public Valet API (bankofcanada.ca/valet) to retrieve the USD/CAD exchange rate for the receipt date. This API requires no authentication and no personal data is sent — only a date parameter.

5. Data Stored Within Your Google Account

All data processed by LoonieLog is stored exclusively within your own Google account:

Google Sheets — Expense rows, Audit Log, Settings display (no API keys in sheet)
Google Drive — Receipt files in your LoonieLog_Unprocessed and archive folders
PropertiesService — API keys, configuration settings, deduplication hashes, FX rate cache. This storage is encrypted by Google and scoped to your user account only.
Gmail — Labels applied to processed threads; filters created to route receipt emails

You retain full ownership of all this data. Uninstalling the add-on does not delete your sheet data or Drive files — you control those directly.

6. Google API Services User Data Policy

LoonieLog's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

Data obtained from Gmail and Drive is used only to provide the receipt logging and expense tracking features described in this policy.
We do not use Gmail or Drive data for advertising purposes.
We do not allow humans to read your Gmail or Drive data except if required for security or legal compliance.
We do not sell Gmail or Drive data to third parties.

7. Children's Privacy

LoonieLog is designed for use by self-employed adults and small business owners. We do not knowingly collect information from children under 13. If you believe a minor has used this add-on, please contact us at srivatsa.kasagar@outlook.com.

8. Your Rights and Controls

Revoke access: You can revoke LoonieLog's OAuth access at any time via Google Account Permissions. This immediately stops the add-on from accessing your Gmail, Drive, and Sheets.
Uninstall: Remove the add-on from Google Sheets via Extensions → Manage Add-ons. This deletes the time-based trigger. Your data in Sheets and Drive is not affected.
Delete your data: Delete the LoonieLog spreadsheet and Drive folders from your account to remove all logged expense data.
Clear script properties: In the Apps Script editor, you can manually clear PropertiesService to remove API keys and cached hashes.

9. Security

LoonieLog uses Google's built-in security infrastructure:

API keys are stored in PropertiesService.getUserProperties() — encrypted at rest by Google and accessible only to your script instance.
All external API calls are made over HTTPS.
The add-on runs in Google's Apps Script sandbox, which restricts file system and network access to the allowlist declared in appsscript.json.

Because there is no LoonieLog server, there is no LoonieLog database that could be breached to expose your data.

10. Changes to This Policy

If we make material changes to this Privacy Policy, we will update the "Last updated" date above and, where possible, notify you via the LoonieLog Dashboard or via the email associated with your Google account.

Continued use of the add-on after changes are posted constitutes your acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy or how LoonieLog handles your data?

Email: srivatsa.kasagar@outlook.com

We aim to respond within 5 business days.

This policy applies to LoonieLog as a Google Workspace Add-on. LoonieLog is not affiliated with or endorsed by the Canada Revenue Agency (CRA), Google LLC, or Anthropic.