BillDrop

Privacy Policy

Last updated: 13 October 2026

BillDrop files the invoices you email to it into your own Google Drive and logs them in a Google Sheet. This page explains what data BillDrop handles to do that.

What we collect

• Your email address, taken from the emails you send to BillDrop. We use it to identify your account and to send you onboarding and processing notifications.
• Google OAuth tokens, issued when you connect your Google account. We store them encrypted (AES-256-GCM) and use them only to write to your Drive and Sheet.
• The IDs of the Drive folder and Google Sheet BillDrop creates for you.
• Invoice attachments (PDFs and images) you email to BillDrop.
• Invoice details extracted from those attachments: vendor name and tax ID, invoice number, date, currency, amounts, a short description and category, the original and renamed filenames, and the subject, date and message ID of the email that carried the invoice.

BillDrop does not read or store the text of your emails, only the sender, subject, date, message ID and attachments. We do not collect any other data.

How we use Google user data

BillDrop requests only the drive.file scope. This lets BillDrop access files and folders that BillDrop itself created in your Drive. BillDrop cannot see any other files in your Drive.

BillDrop uses this access to create an invoice folder and an invoice log spreadsheet, upload renamed invoice files into dated subfolders, and append one row per invoice to the spreadsheet. We do not use Google user data for advertising, we do not sell it, and we do not let people read it except when you ask us for support or the law requires it.

BillDrop's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Services that process your data

• Cloudflare receives the emails you send to BillDrop and passes the attachments to our server.
• Anthropic (Claude API) reads each attachment to extract the invoice details. Anthropic does not use API inputs to train its models.
• Google stores the invoice files and spreadsheet in your own Google account.
• ZeptoMail delivers the emails BillDrop sends you.

Retention

BillDrop does not keep a permanent copy of your invoice files: the copy that matters lives in your Google Drive. While an invoice is processed, a temporary copy sits in our job queue; the queue discards it as newer jobs arrive. We keep your account details and the extracted invoice details in our database until you ask us to delete them, so that BillDrop can detect duplicate invoices.

Your choices

• You can revoke BillDrop's access to your Google account at any time from your Google account permissions. Files already in your Drive stay there.
• You can ask us to delete your account and all data we hold about you by emailing [email protected].

Changes

If we change this policy, we will update the date at the top of this page.

Contact

Questions about this policy: [email protected].