Privacy

In short

• Padsy reads your bank data, read-only, to show your bills and what you can safely spend. It cannot move money.
• If you connect your email, Padsy reads only the emails that look like bills, receipts, renewals or cancellations, and keeps the details it finds, not the emails.
• Padsy does not sell your data and does not use it for advertising.
• You can disconnect your bank or your email at any time, and ask us to delete your data.

Your bank data

Padsy gets your bank data through Redbark, a Consumer Data Right representative of Fiskil, using a key you create in your own Redbark account. Padsy never sees your bank login and cannot move money. With that key Padsy reads, read-only:

• your accounts (their names and types) and their balances;
• your transactions, including pending ones: date, description, amount, merchant and category, up to 24 months back;
• investment holdings, where your Redbark account provides them.

Padsy keeps these in its database. Your Redbark key is stored encrypted.

Your email, if you connect it

You can connect an Outlook or Gmail mailbox. Padsy asks for read-only access: it cannot send, change or delete your email.

Padsy opens only emails that look like bills, receipts, renewals or cancellation notices:

• from billers you have, or from an app store or marketplace with a receipt or invoice in the subject; or
• with a bill, invoice, receipt, renewal or payment in the subject.

It never opens replies or forwards, mail you sent, drafts, junk, deleted mail, mail from your own addresses, or Gmail’s Promotions and Social tabs.

From an email it opens, Padsy reads the sender, the subject, the date, the To line (never Cc or Bcc), the text of the message, and the text of up to three PDF attachments. It ignores other attachments and images.

Padsy does not keep the email. It keeps the details it found: who the bill is from, the account number the document prints (for an app store, that can be the account email it names), the product or plan, the amount, the dates, and whether the document calls itself a statement, an invoice or a receipt. It also keeps a record that it read the email, with the email’s ID, the sender’s address and the subject stored only as one-way codes, never as text. The permission to read your mailbox is kept in Microsoft Azure Key Vault, not in Padsy’s database.

Who handles your data for us

• Microsoft Azure, in Australia, hosts Padsy: the website, the server, the database, the key vaults and the logs.
• Clerk runs sign-in: your login email, and your password or Google sign-in.
• Anthropic, in the United States, provides the AI model that reads a bill email to find its details. It is sent the sender’s name and domain (not the full address), the subject, the text of the message and the text of its PDFs. Where Padsy checks whether a payment paid a bill, the model is also sent the bill’s name and amount with one bank transaction line; and when you ask Padsy to draft a budget, it is sent totals by category and your largest merchants.
• Redbark and Fiskil provide your bank data.
• Microsoft and Google provide your mailbox to Padsy when you connect it.
• If you turn on notifications, your browser’s push service (Apple, Google, Microsoft or Mozilla) delivers them.

Padsy uses no advertising or analytics companies. When you are signed in, Microsoft’s Application Insights counts which Padsy page you opened, with an internal ID and no cookies.

Who at Padsy can see it

Padsy’s administrator can see:

• feedback you send, with its screenshot if you add one;
• your recurring bank charges, to improve how charges are labelled.

No one at Padsy sees what Padsy reads from your email: those details are shown only to you.

Disconnecting

• Email: on Accounts, choose Disconnect. Padsy deletes its permission to read your mailbox straight away; Microsoft Azure keeps a recoverable copy of it for 7 days, then it is gone. For Gmail, Padsy also tells Google to withdraw it. For Outlook, also remove Padsy in your Microsoft account’s app permissions: Microsoft does not let Padsy do that for you. What Padsy already found in your emails stays until you ask us to delete it.
• Bank: on Connections, choose Remove. Padsy deletes your Redbark key and stops collecting. Data already collected stays until you ask us to delete it.

Deleting your data

There is no delete button yet. Email help@padsy.com.au from the address you sign in with, and we delete everything Padsy’s database holds for you: your bank data, your bills, what Padsy found in your emails, and your settings. Disconnect your email first, so its permission is withdrawn too. Deleting your sign-in, which Clerk holds, is a separate step: say so in your email and we do it as well.

Deleted data can remain in Padsy’s database backups for up to 7 days, and in its logs for up to 30 days. The logs do not hold your emails or your amounts.

Google user data

If you connect Gmail, Padsy uses what it reads only to find your bills, renewals and cancellations and show them to you, as described above.

The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

Contact

Questions about your data: help@padsy.com.au.