Data & permissions

Privacy policy

Last updated 25 October 2026

Backstage Receipts is a private, personal-use workspace. This policy explains its optional Gmail receipt integration and these public information pages.

Google account access

The owner chooses whether to connect a Google account. The only requested Gmail permission is gmail.readonly, which permits reading messages and mailbox settings. Google grants this permission at mailbox level; it is not limited by Google to particular senders.

Backstage's implementation queries receipt senders from Uber and Bolt, including Uber Eats. It reads matching messages to identify receipt candidates. The application does not send, modify or delete emails, labels or mailbox settings.

Data used and stored

The integration uses the connected account's email address, message identifiers, sender, subject, receipt text, receipt dates, amounts, currencies and supported PDF or image attachments. It also keeps sync status and identifiers to avoid processing the same message repeatedly.

Receipt candidates and their original emails are stored on the owner's private server. When the owner confirms an expense, its original email and supported attachments are associated with that expense. Suggestions do not affect expense totals before confirmation.

Purpose and sharing

Google data is used to suggest and document the owner's expenses. It is not sold, used for advertising, or used to train AI models. The receipt integration does not send email content to an AI service.

The private application uses Google's APIs to obtain authorised Gmail data. These public pages do not connect to Gmail or to the private server, and do not provide access to receipts, the agenda or the application's API. Cloudflare hosts these pages and may process request information to deliver and secure them.

Security and control

Google credentials are stored privately on the owner's server, outside application source files and portable exports. Server-side credential and original-email files have restricted filesystem permissions. The application requires authentication to access its records.

The owner can disconnect Gmail in Backstage, which removes the locally stored Google connection. The Google permission can also be revoked at any time in Google Account connections.

Retention and deletion

Stored receipt emails, suggestions, expenses and the owner's backups remain until the owner removes them. Ignoring a suggestion or disconnecting Gmail does not delete previously stored originals. The owner controls the private server and can remove stored Gmail emails, associated records and backups through its administration. Reconnecting Gmail after deletion may retrieve matching messages again.

Public website

These information pages have no forms, application login, advertising or analytics scripts, and do not set application cookies. They contain no personal work records. Cloudflare's delivery and security processing is described in its privacy policy.

Google API policy

Use of Google data follows the Google API Services User Data Policy, including its Limited Use requirements.

Contact

For privacy questions, use the developer contact displayed on Google's authorisation screen. Backstage is a personal tool operated by the account owner, with no public registration.