Privacy Policy

• Numero only accesses sources you explicitly connect (Gmail today), and only with read-only permission.
• Numero never sends, deletes, labels, or otherwise modifies anything in a connected account.
• To recognize financial activity, Numero transmits qualifying email content (subject, sender, recipients, body text, and attachment text) to OpenAI, our AI extraction sub-processor, for the sole purpose of extracting structured facts. OpenAI does not use this content to train models, per its API Data Usage Policy.
• Numero persists only structured facts — merchant, amount, date, category, document type — never the raw email body, subject, sender address, or attachment content.
• Numero never sells your data or uses it for third-party advertising.
• You can export or delete your data, and disconnect a source, at any time from Settings.

Numero's use and transfer of information received from Google APIs (including Gmail) adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Numero only requests the gmail.readonly scope — the narrowest scope that allows reading messages. Numero never requests permission to send, modify, or delete email, and never requests access to Google Drive, Calendar, or Contacts.
• Numero uses Gmail data solely to recognize financial activity and surface it back to you inside Numero. It is never used for advertising, never sold, and never used to train generalized AI or ML models.
• Numero does not permit humans to read your Gmail data except (a) with your explicit consent for a specific support request, (b) as necessary for security investigations, or (c) to comply with applicable law.
• Gmail content transferred to Numero's AI extraction sub-processor (OpenAI) is bound by the same restrictions through Numero's Data Processing Addendum with OpenAI and OpenAI's own public data-handling policies.

When you sign in, Numero collects the basic profile information Google provides:

• Your name
• Your email address
• Your profile photo

When you connect a source (Gmail today; more sources are planned), Numero processes messages in memory to recognize financial activity, and persists only structured facts, such as:

• Merchant or sender name
• Transaction amount and currency, when detected
• Transaction, invoice, or event date
• Category and document type (for example: purchase, subscription, refund, bill, warranty, insurance)
• Confidence and provenance information (how sure Numero is, and which source it came from)
• Optional profile details you choose to add yourself, such as a date of birth (used only to improve future document understanding, and never required)

By design, the following are processed only in memory and by our AI extraction sub-processor (see Section 4), and are never written to Numero's persistent storage:

• Email body content
• Email subject lines
• Email attachments or their contents (including PDFs)
• Full sender or recipient email addresses beyond the merchant domain that appears in the structured facts
• Any content of a connected source beyond the structured facts described above

“Never stored” means never written to Numero's database or long-term storage. Content is still transmitted, in memory, to OpenAI during a single extraction request as described in Section 4.

Numero uses the information above solely to operate and improve the product for you:

• Building and maintaining your financial timeline
• Recognizing patterns (such as recurring subscriptions) and detecting Financial Moments that may deserve your attention
• Letting you search, browse, and review your own recognized activity
• Diagnosing and fixing problems with recognition accuracy

Sub-processor: OpenAI, LLC

To recognize financial activity, Numero transmits qualifying email content to OpenAI, LLC (San Francisco, California, USA) acting as a service provider under a Data Processing Addendum executed with Numero.

• What is sent: the email subject, sender address, recipient addresses, plain-text body, and text extracted from PDF attachments — only for messages that Numero's own classification identifies as likely financial activity, and only for one extraction request at a time.
• Purpose: extracting structured fields (amount, currency, merchant, date, category, direction, reference numbers) that Numero displays back to you in your Financial Memory. No other purpose.
• Retention by OpenAI: OpenAI does not use API inputs or outputs to train models by default, per OpenAI's public API Data Usage Policy. API content is retained by OpenAI for up to 30 days for abuse monitoring, then permanently deleted, per OpenAI's Enterprise Privacy Commitments. Numero additionally sends `store=false` on every request, which instructs OpenAI not to persist the request beyond the immediate response.
• No human review: OpenAI does not conduct human review of API traffic except for security or abuse investigations. Numero does not send email content to OpenAI for human review under any circumstances.
• No training: neither Numero nor OpenAI uses your email content to train generalized AI or ML models.
• No advertising: neither Numero nor OpenAI uses your email content for advertising, personalization outside Numero, or resale.

You can review OpenAI's own commitments here: API Data Usage Policy, Enterprise Privacy Commitments, and the Data Processing Addendum Numero has executed with OpenAI.

A smaller category of aggregated summaries (merchant names, amounts, category totals — never raw email content) is also sent to OpenAI in a separate request to generate your Financial Moments and to answer questions in the in-product AI Search feature. The same data-handling terms above apply to that request.

• Data is encrypted in transit (TLS) and at rest.
• Access follows least privilege: Numero requests only the permission scopes it needs, and nothing more.
• Source connections are revocable at any time, independent of any other permission.

Numero does not sell your personal information, and does not use it for third-party advertising. We share information only with the following categories of recipients, each bound by contractual confidentiality obligations and used only for the purpose stated:

• OpenAI, LLC — AI extraction sub-processor. Purpose and scope described in Section 4.
• Cloud infrastructure providers (Cloudflare, our managed Postgres and Redis providers) — hosting, delivery, and backup of Numero's systems.
• Razorpay Software Private Limited — payment processing, when and if you choose to subscribe to a paid plan. Only the billing information you provide at checkout is transmitted; no email or financial-activity data is ever sent to Razorpay.
• PostHog, Inc. — anonymous product analytics (feature usage, screen visits). Financial content, email content, and account identifiers are excluded from analytics events.
• Authorities, only where required by law.

A current list of Numero's sub-processors is available on request from support@hellonumero.com.

From Settings, at any time, you can:

• Export your recognized financial data as CSV or JSON
• Delete all recognized data while keeping a source connected (you can rescan afterward)
• Disconnect a source, which immediately revokes Numero's access to it
• Delete your account entirely, which removes your data, connections, and profile

Depending on where you live, you may have additional rights — for example, to access, correct, or restrict processing of your information under regulations such as the GDPR or CCPA. Contact us at support@hellonumero.com to exercise these rights.

Numero retains your recognized financial data for as long as your account is active, or until you delete it or your account. If you delete your account, we delete your data within a reasonable operational window, except where retention is required by law.

Numero is not directed to, and does not knowingly collect information from, children under 18.

We may update this policy as Numero adds sources or features. We will update the “Last updated” date above, and material changes will be communicated within the product.

Questions about this policy or your data? Reach us at support@hellonumero.com.