Privacy Policy

What we access

Jam & Nuts requests Gmail read access to find invoices and receipts, and compose access to create drafts or send packets you request. Compose permission also allows managing drafts. The app does not edit or delete the source messages it collects from.

Sending to your accountant

You choose the collection period, recipient and delivery option. By default, Jam & Nuts creates Gmail drafts containing your monthly ZIPs and document lists for you to review and send. If you choose direct sending, it sends to the recipient you selected. Automatic collection runs only when you enable a schedule on Pro, using your saved delivery choice.

What we store

• Your Google account name and email address, connected mailbox details, and encrypted Gmail access credentials
• Collection, recipient, delivery and schedule preferences
• Sender, subject, date and attachment information for collected messages, plus temporary copies of documents and ZIPs
• Collection progress and usage records, including message identifiers needed to resume an unfinished run
• Completed activity records: mailbox and recipient, collection months, document count, delivery mode, timestamps and a digital fingerprint of each packet
• Subscription status and PayPal subscription identifiers

For receipts contained in an email rather than an attachment, we save the message body as an HTML file for your packet.

After a collection

After Gmail confirms the drafts were created or the packets were sent, we delete the collected document copies, generated ZIPs and collected message metadata from our app storage. Account preferences, usage and activity records remain so you can manage your account and see previous collections. The public packet link shows the document count, delivery status and recorded dates; it does not show documents or email addresses. Anyone with that link can view the record.

Unfinished collections

If collection, delivery or deletion fails, working copies may remain so the operation can be resumed. The dashboard shows the unfinished state. Scheduled cleanup also removes an account’s abandoned collections after all of its collected messages have been inactive for seven days. You can remove collected data sooner by disconnecting Gmail or deleting your account in Settings.

What the classifier sees

To identify invoices and receipts, we send the message identifier, sender, subject, date, attachment filenames and the short preview line Gmail provides to Mistral AI. Full email bodies and attachment contents are not sent to the classifier.

How we use your data

We use this data to find invoices and receipts and prepare your packets. Data is processed by the service providers listed below and sent to a recipient only when you request it. We do not sell your data or use it for advertising.

Third-party services

• Google Gmail API — to read messages, retrieve documents, create drafts and send packets you request
• Mistral AI — to classify messages using message identifiers, sender, subject, date, attachment filenames and the Gmail preview line
• DigitalOcean — to host the app and its file storage and MongoDB database
• PayPal — to process subscription payments

Data deletion

In Settings, disconnecting Gmail removes that mailbox’s stored credential, collected files and message metadata. Completed activity records remain in your account history. Delete all my data cancels PayPal renewal and removes your Jam & Nuts account, credentials, preferences, schedules, activity records and collected files across all mailboxes. We request removal of Google access during either action. If Google does not confirm it, the result shows how to review your Google connections; app passwords must be removed in Google separately. Copies already saved to Gmail or delivered to recipients remain with them. Contact us for help with deletion.

Security

OAuth refresh tokens are encrypted at rest with AES-256-GCM. Connections between your browser and our website use HTTPS. Collected files are held on a private storage volume and require account authorization to access through the app.

Contact

Questions? Email us.