Privacy Policy

Last updated: May 22, 2026

1. Who we are

Progressly ("we," "our," "us") is software that helps accountants chase clients for missing tax documents. The application operates inside the accountant's existing Gmail inbox. We are based in Ontario, Canada. You can reach us at luxecardetailing.contact@gmail.com.

2. Who uses Progressly

Progressly is sold to accountants and accounting firms ("accountants" or "users"). Their clients (the people the accountant is collecting documents from) do not have accounts with us and do not interact with our product directly — they reply to the accountant's normal Gmail address. This policy describes both the accountant's data and the data Progressly processes about their clients on the accountant's behalf.

3. What data we collect

Account data — when an accountant signs up: name, email, optional firm name, and a hashed password.

Gmail data — when an accountant connects their Gmail (via Google OAuth), Progressly reads, sends, and modifies labels on email in their inbox. Specifically:

• Read emails to and from the accountant (subject, body, attachments, sender, recipient, date) to identify which contacts are clients, what documents have been requested, and what documents have been received.
• Send follow-up emails on behalf of the accountant when they approve a drafted reminder.
• Modify labels (read/unread status, archive, label-add) only when the accountant takes an action in Progressly that maps to a Gmail operation.

Document data — files attached to a client's reply are downloaded so the AI can identify the document type, match it to a requested document, and either store it in the accountant's connected cloud storage (Google Drive or OneDrive) or in our database as a fallback.

Usage data — diagnostic logs (which routes are hit, scan run timestamps, errors) so we can fix bugs and improve reliability.

4. How we use Gmail data (Google's Limited Use disclosure)

Progressly's use of Gmail data complies with Google's Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• Gmail data is used only to provide the user-facing features described above (chasing clients for documents, drafting reminders, matching received files).
• We do not use Gmail data to train generalized AI models. AI calls are made to identify what a specific document is for a specific accountant's case; no Gmail data is retained by the AI provider beyond the request.
• We do not sell Gmail data.
• We do not use Gmail data for advertising.
• We do not share Gmail data with third parties except as necessary to provide the service: (a) sending it to AI providers (OpenAI) for classification, (b) storing files in the user's own Google Drive or OneDrive when they connect it, (c) hosting on Vercel (compute) and Supabase (database) as our infrastructure providers.
• Only authorized employees access Gmail data, and only when necessary to debug a specific issue at the user's request.

5. AI processing

We send portions of Gmail content (email subjects, body snippets, attached document contents) to OpenAI in order to identify clients, classify documents, and draft follow-up emails. We send the minimum necessary data to perform each task. OpenAI does not train models on our API traffic per their API data usage policy. We do not send Gmail content to any other AI provider.

6. Where data is stored

• Account data and conversation metadata — Supabase (PostgreSQL), hosted in AWS US-West-2.
• Document files — by default, in the accountant's own connected Google Drive or OneDrive folder. If no cloud storage is connected, files are stored as binary blobs in the Supabase database described above.
• OAuth tokens (used to access Gmail) — encrypted at rest in the same Supabase database.
• Application logs — Vercel (US regions).

7. How long we keep data

We keep account data, Gmail-derived metadata, and document files as long as the accountant's account is active. If the accountant deletes their account, we delete all associated data within 30 days. The accountant can also delete individual clients, cases, or files at any time from the application UI, and those are removed immediately.

8. Your rights

Accountants can:

• Disconnect Gmail at any time from Settings, which immediately revokes our access.
• Delete individual clients or files from the application UI.
• Request full account deletion by emailing us — we will confirm and complete the deletion within 30 days.
• Request a copy of all data we hold about them.
• Revoke our Gmail access directly from their Google Account permissions page at any time.

End clients of the accountant (people the accountant is collecting documents from) do not have accounts with us. They can request that the accountant delete their data, which the accountant can do through the application UI.

9. Security

OAuth tokens and document contents are encrypted at rest. All connections use TLS. Access to production data is limited to authorized employees and requires multi-factor authentication.

10. Children

Progressly is not directed at children under 16. We do not knowingly collect personal information from children.

11. Changes to this policy

If we materially change how we use Gmail data, we will notify users by email and require re-consent before the change takes effect for them. Minor changes (clarifications, contact info) take effect when posted.

12. Contact

Questions, deletion requests, or concerns: luxecardetailing.contact@gmail.com.