Your data · Review pending
Gmail import & privacy
Gmail import helps you find possible subscriptions in receipt and renewal emails. The existing one-time scan runs when requested; the separate continuous pilot requires its own consent. Availability depends on whether Gmail import has been enabled for this Renulio installation.
This feature notice accompanies the general draft privacy notice. Legal/controller details and Google configuration still require review before general availability.
Optional continuous discovery — controlled pilot
This is a separate opt-in from the one-time scan below. Approved pilot accounts can let Renulio search up to 2,000 matching messages over a configurable window of up to 24 months and automatically save sufficiently supported billing records. Ambiguous candidates stay outside financial totals. A stable contract identity, authenticated sender indication and explicit billing facts are required. Email evidence does not verify current provider terms.
The server performs queued incremental updates, normally every six hours, even with your browser closed. Google Testing refresh access normally expires after seven days and requires reconnection. Raw bodies and limited text-based invoice PDFs are processed in memory and discarded. No links, images or email actions are executed; no email data is sent to an external AI service.
Credentials are encrypted on the server and bound to your account. Minimal billing facts, hashed source references, processing checkpoints and change history are stored. Evidence older than 90 days is removed on successful batches, except scheduled future changes; linked current provenance remains until source-data deletion. Paused or failing sources need deletion to clear retained evidence sooner.
Pause stops new reads while retaining credentials and records. Disconnect stops new reads and requests Google revocation, keeping ledger records and evidence. Credentials are cleared after confirmed revocation; failures remain visible and are retried. Delete Gmail-derived data removes evidence and unchanged automatically managed entries while preserving manual or edited entries and existing decision history. In-flight work cannot save after disconnection. Remove access directly from your Google Account if revocation is not confirmed.
Updates preserve user corrections. Past payments are labelled separately from confirmed next charges. Cancelled renewal does not mean access ended and suppresses renewal reminders. Reminder consent remains separate. Real Gmail acceptance, Google restricted-scope verification and a controlled public pilot remain pending.
Existing one-time scan
Google’s read-only Gmail permission permits access to mailbox messages and settings. Renulio uses it to search up to 40 matching billing and subscription messages in the previous 400 days, including known service senders and other business senders. It reads message text to identify a possible subscription and any clearly stated amount, currency, billing cycle or next renewal date. Unrecognised services need you to identify their name. It does not request email attachments or follow links and images inside messages.
Email bodies are processed during the scan and then discarded. They are not written to Renulio’s database, sent to an AI service, used for advertising, or deliberately logged by the application. Renulio does not send, delete or modify email.
Up to 10 suggestions, their source dates, evidence labels, count of matching email days and scan status are stored in a short-lived encrypted, HttpOnly cookie bound to your Renulio account. For an unrecognised subscription, the business sender’s domain is retained as a review hint; full sender addresses, names, subjects and message bodies are not retained. This cookie expires after 15 minutes and can be removed sooner with “Clear scan suggestions.” Displayed suggestions also remain in page memory until you leave or reload. Saved subscriptions contain only the details you review and submit, and remain in your ledger until you delete them.
Google access tokens are used only during the scan and are never stored in the browser or database. Whenever an access token is received, Renulio requests revocation when the scan finishes, including on errors. If the connection is interrupted before a token is received, or Google does not confirm revocation, Renulio shows a link to review and remove access in your Google Account. No background access or automatic periodic scans are performed.
Email sender matching is an identification hint, not proof of authenticity or an active subscription. Amounts can describe a past payment, and a renewal notice can become outdated. Only clearly stated details are suggested; you must check current billing information with the provider before saving.
Receipts from shared Google or Apple senders require an explicitly named, recognised subscription product. Global purchase totals and renewal fields are not assigned to that product; a field must name the product itself. Combined or unidentified products can be missed, and missing values stay blank. English and Greek labelled billing fields are supported conservatively; this is not a guarantee that every receipt format is recognised.
The data is used solely for this user-requested subscription review. The feature is designed around the Google Workspace user-data policy, including its Limited Use requirements. This page describes the feature’s data handling; it does not claim Google verification has been completed.
Return to Renulio →