Privacy Policy

Last updated: August 30, 2026

RemindOCR ("the App") is operated by HandCoded ("we", "us"). This policy describes how we collect, use, and protect your information.

1. Information We Collect

• Google Account Info: When you sign in with Google, we receive your name, email address, and profile picture from Google. We use this solely for authentication and displaying your identity within the App.
• Gmail Data: If you connect your Gmail account, we access your inbox in read-only mode to list emails with attachments. We only read email metadata (sender, subject, date) and download attachments you explicitly choose to import. We do not read email body content.
• Google Calendar Data: If you connect Google Calendar, we create and update calendar events for reminders and inspection due dates in an app-created calendar (using the calendar.app.created scope). We do not access unrelated calendars or events outside that app-managed calendar.
• Google Drive Data: If you connect Google Drive, we create and manage folders/files that the App opens or creates for document backup and export (using the drive.file scope). We do not browse or access your broader Drive contents beyond those app-managed files.
• Uploaded Documents: Documents you upload or import are stored securely and processed using OCR and AI extraction to identify key data (dates, names, contract terms).
• Usage Data: We log basic request information (IP address, user agent, timestamps) for security and debugging purposes.

2. How We Use Your Information

• Authenticate your identity and maintain your session
• Display and manage your documents, clients, contracts, and reminders
• Send reminder emails on your behalf when contracts or inspections are due
• Import PDF attachments from your Gmail when you request it
• Sync reminder and inspection dates to Google Calendar when you connect Calendar
• Back up and export documents to Google Drive when you connect Drive

3. Data Storage and Security

• Your data is stored in a MongoDB database hosted on MongoDB Atlas with encryption at rest.
• Document files are stored in cloud object storage (DigitalOcean Spaces) with server-side encryption.
• All connections use HTTPS/TLS encryption in transit.
• Session cookies are signed, HTTP-only, and secure.
• Google OAuth tokens (Gmail, Calendar, and/or Drive, depending on what you connect) are stored encrypted in the database and are used only to access those Google services on your behalf.

4. Data Sharing

We do not sell, trade, or share your personal data with third parties. Your data is shared only with:

• Google APIs: To authenticate you and, with your explicit consent, access Gmail (read-only import), Google Calendar (app-created events), and/or Google Drive (app-managed files).
• OpenAI API: Document text may be sent to OpenAI for AI-powered data extraction. No personal identifiers are included beyond what appears in the document text.
• Email provider (Resend): To send reminder emails on your behalf.

5. Data Retention

• Your account and data are retained as long as your account is active.
• You can request deletion of your account and all associated data by contacting us.
• Session data expires automatically after 7 days.
• OAuth state tokens expire after 10 minutes.

6. Your Rights

• You can disconnect Gmail, Google Calendar, and Google Drive at any time from the App (Profile / settings).
• You can request access to, correction of, or deletion of your personal data.
• You can revoke the App's access to your Google account at Google Account Permissions.

7. Google API Services User Data Policy

RemindOCR's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

For privacy-related questions, contact: contact@remindocr.com