PurchaseGuard — Track purchases. Never miss a return deadline.

1. Our Core Privacy Commitment

PurchaseGuard Inc. (“PurchaseGuard”, “we”, “us”, or “our”) is designed with privacy as a foundational principle. We build tools to help you track online purchases and stay ahead of return and warranty deadlines.

We NEVER sell your personal data or purchase information to advertisers or data brokers.
We NEVER scrape merchant websites or ask for your retailer passwords (Amazon, Walmart, Target, etc.).
We NEVER use your emails or receipts to train public or commercial third-party generative AI models.
We strictly utilize OAuth 2.0 with minimal read-only permissions to parse receipts you authorize.

2. Information We Collect

We only collect information strictly necessary to provide the service:

Account Information: Email address, name, preferred currency, preferred language, country, and timezone.
Purchase Data: Retailer name, order identifier, purchase date, item descriptions, price, currency, return deadlines, and warranty dates.
Uploaded Receipts & Documents: Invoices or images you upload directly, encrypted and stored in private isolated cloud storage.
OAuth Connection Tokens: Encrypted access and refresh tokens for Gmail or Outlook, stored using AES-256-GCM encryption.
Anonymized Telemetry: Hashed IP addresses and user agents for security audits, rate-limiting, and fraud prevention.

3. How We Process Email Data (Gmail & Outlook)

When you connect your email using Google OAuth or Microsoft Graph, we request read-only access (gmail.readonly or Mail.Read). Our background pipeline only reads emails matching purchase confirmations, shipping notices, or refund receipts. We decode the minimal structured fields required and immediately discard non-purchase messages.

You can disconnect your email connection at any time in your Dashboard, with an instant option to purge all synced purchase data.

4. Your Global Privacy Rights (GDPR, CCPA, PIPEDA, LGPD)

Regardless of where you reside, you enjoy complete control over your data:

Right of Access & Portability: Download a full, machine-readable JSON export of all your data anytime in Settings.
Right to Erasure (Be Forgotten): Request permanent account deletion and complete erasure of all receipts and purchases with a single click.
Right to Rectification: Edit and correct any extracted purchase details directly in the dashboard.
Non-Discrimination: We never deny services or charge different rates for exercising your privacy rights.

5. Data Retention & Security Architecture

All traffic is protected with TLS 1.3 encryption in transit. All user files and OAuth tokens are protected with AES-256-GCM encryption at rest. Deleted accounts are completely purged from active storage within 24 hours.

6. Contact Our Data Protection Officer (DPO)