Last updated: 11 November 2026
In short
- The Gmail add-on reads only the email you have open, and only while you use the add-on on it.
- To read an invoice, the attachment is sent to our server and to Google’s Gemini on Vertex AI. Nothing is kept: no files, no fields, no email text.
- Your invoices and rows are saved in your own Google Drive and Google Sheet. InvoiceRows can only reach the folder and sheet it created or you picked.
- We store your email address, your plan and how many invoices you saved each month.
- We never sell data, never use it for advertising and never use it to train AI models.
Who is responsible
Sascha Heyer, hello@invoicerows.com. Further details are in the legal notice. This policy covers the InvoiceRows Gmail add-on, the API behind it and the website invoicerows.com.
Google user data the add-on uses
The add-on asks Google for these permissions, and uses them only as described here:
| Permission | What InvoiceRows does with it |
|---|---|
Run as a Gmail add-on and read the open message (gmail.addons.execute, gmail.addons.current.message.readonly) | When you open the add-on on an email, it lists that email’s attachments and reads the one that is the invoice. It sends the attachment, the subject line and the sender’s name and address to our API to read the invoice fields. It cannot see any other email. |
Files it created or you picked in Google Drive (drive.file) | Creates the “InvoiceRows” folder and the bookkeeping sheet, uploads the invoice file, appends the row, and reads that sheet’s tab to find duplicates and to export CSV. It cannot see any other file in your Drive. |
Your Google account’s email address (userinfo.email, openid) | Identifies you to our API, so your plan and your monthly count belong to your account. |
Connect to external services (script.external_request) | Lets the add-on call our API and Google’s Drive and Sheets APIs. |
Limited Use. InvoiceRows' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide the add-on’s features you see; we don’t transfer it except as needed to provide those features (to Google Cloud for reading the invoice), to comply with law, or as part of a merger or sale with notice to you; we don’t use or transfer it for advertising, for credit decisions or to train AI or machine-learning models; and no person reads it unless you ask us to for support, it is needed for security or to comply with law.
Reading invoices
When the add-on reads an attachment, our API (Google Cloud Run in Belgium, europe-west1) sends it to Gemini on Google Cloud Vertex AI through Google’s global endpoint, with storage of the request switched off. On the global endpoint Google may process the request in any of its data centres, including outside the EU; the data isn’t stored there. Gemini returns the invoice fields; the API checks them and sends them back to the add-on. The API keeps neither the file nor the fields nor the email text. Our logs record only technical facts such as the file size, the file type and how long reading took. Google acts as our processor under the Google Cloud Data Processing Addendum and doesn’t use this data to train models.
The add-on keeps the fields it read in your Apps Script user cache (Google’s storage, tied to your account) for up to six hours, so reopening the same email doesn’t read it again. Your settings (folder, sheet, columns, formats) are stored in your Apps Script user properties until you uninstall the add-on.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
Your account and usage
For each Google account that uses InvoiceRows we store in Google Cloud Firestore (Belgium, europe-west1): your email address and a key derived from it; for each month, the number of invoices saved and read and a one-way fingerprint of each saved attachment (so a retry isn’t counted twice), which contains no invoice content; for each month, how many AI tokens reading your invoices used, per model; your plan and its Stripe customer and subscription IDs; and short-lived links (1 to 2 hours) that open checkout or the Drive picker from the add-on. Monthly records are deleted after about 13 months; the rest when you delete your account.
On the website you can sign in with Google or with a link sent to your email address, through Firebase Authentication (Google Ireland Limited). Firebase stores your email address and, with Google sign-in, your name and profile picture. Sign-in links are sent by Firebase.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
Deleting your account: on your account page, “Delete account” deletes these records and your sign-in and cancels a running subscription. Your files and sheet stay in your Google Drive; uninstall the add-on in Gmail to remove its settings.
Payments
Payments are handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe processes your payment details; we never see your card number. We receive and store your plan, the amount, the time of payment and your Stripe customer ID. Payment records are kept as tax and commercial law require (up to ten years). Legal basis: Art. 6(1)(b) and (c) GDPR.
The website
invoicerows.com runs on Google Cloud Run in Belgium (europe-west1). Every request is logged with the IP address, time, page and browser for operation and security, and the logs are deleted after 30 days (Art. 6(1)(f) GDPR). Fonts are served from our own server; no request goes to Google Fonts.
Visitor statistics. We count visits with our own cookieless script. When you arrive, it sends the entry page, the referring site without its parameters, campaign parameters, your time zone and language. To count unique visitors, the server forms a hash of the IP address and browser that changes daily; the IP address itself isn’t stored, and nothing is stored in your browser. The data is stored in Google BigQuery in the EU and deleted after 24 months. Legal basis: our legitimate interest in knowing how people find InvoiceRows (Art. 6(1)(f) GDPR). You can object at any time by email. There is no Google Analytics and no advertising tracking, so there is no cookie banner.
The account page stores your sign-in in your browser’s local storage (§ 25(2) no. 2 TDDDG: strictly necessary). The Drive picker page loads Google’s sign-in and Picker scripts from Google when you open it.
Transfers outside the EU
Google and Stripe may process data in the United States. Both are certified under the EU-US Data Privacy Framework, and their data processing terms include the EU standard contractual clauses.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). Write to hello@invoicerows.com. You can also complain to a data protection supervisory authority.