Privacy Policy

Last updated: July 5, 2026

YourClerk ("we", "our", or "us") is operated by Mint on Card Inc. This Privacy Policy explains what data we access, how we use it, and your rights.

1. What Data We Access

YourClerk connects to your Google account to provide its services. Depending on which features you enable, we may access:

• Gmail — Read your emails to search for information you ask about (receipts, contracts, closing documents). We also send emails on your behalf when you explicitly approve each message.
• Google Drive — List and read files you've stored to include them in search results.
• Google Calendar — Read your calendar events for daily summaries and search queries. Create calendar events when you approve them.
• Basic profile — Your name and email address for account identification.

You control what we access. Each Google service (Gmail, Drive, Calendar) requires a separate opt-in connection from your Settings page. You can disconnect any service at any time.

2. How We Use Your Data

• Answering your questions. When you ask "search emails about my Rokos Ct purchase", we search your connected accounts and return a summary with source references.
• Indexing for fast search. We may store text excerpts from your emails and documents in our secure database so future searches are faster.
• Daily summaries. If enabled, we aggregate your calendar events and important emails into a morning briefing.
• Sending on your behalf. We only send emails or create calendar events when you explicitly approve each action.

We never sell your data, show you ads, or use your data to train AI models. Your data is only used to provide the service you've asked for.

3. Data Storage & Security

Your data is stored in Oracle Cloud Infrastructure (OCI) with encryption at rest and in transit. Google OAuth tokens are encrypted before storage. We use database-level tenant isolation to ensure your data is only accessible to users within your organization.

Email content and document excerpts are stored in a vector database for semantic search. You can request deletion of your indexed data at any time by contacting us.

4. AI & Third-Party Subprocessors

We use the following services to process your requests:

• DeepSeek (AI language model) — Classifies your intent and generates answer summaries from search results.
• OpenAI (embeddings API) — Converts text into vector representations for semantic search. OpenAI does not retain embeddings sent via their API.
• Google APIs — Gmail, Drive, and Calendar APIs to fetch data you've authorized us to access.
• Twilio — SMS delivery for phone-based access (if enabled).

Your data is transmitted to these services only during active request processing and is not retained by them.

5. Data Retention

• Indexed content — Stored until you disconnect the associated service, delete your account, or request removal.
• Search history — Stored temporarily to avoid re-fetching the same emails. Cleared when you request it.
• OAuth tokens — Stored encrypted until you disconnect the service or revoke access from your Google Account.

6. Your Rights

You have the right to:

• View what data we've indexed about you.
• Request deletion of your indexed data.
• Revoke Google access at any time from your Google Account settings or the YourClerk Settings page.
• Request a copy of your data.

To exercise any of these rights, contact us at [email protected].

7. Cookies

We use essential session cookies for authentication (JWT tokens stored in HttpOnly Secure cookies). We do not use tracking cookies, analytics cookies, or advertising cookies.

8. Contact

Mint on Card Inc
Email: [email protected]
Domain: yourclerk.app