Card Ledger is a personal tool used only by its owner. It is not offered to the public.

• Gmail access is read-only (gmail.readonly) and is used only to find and read credit card e-statements, including their PDF attachments, from two banks.
• Statements are parsed on the owner's own computer. Only the transaction date, merchant, and amount are extracted, and they are written to a single Google Sheet owned by the owner.
• Authorization tokens are stored only on the owner's computer.
• No data is sold, shared with third parties, or used for advertising.
• When a merchant can't be categorized automatically, only the merchant name is sent to the Anthropic Claude API to choose a category. Card numbers, names, and statement contents are never sent.
• Access can be revoked at any time from the Google Account "Third-party apps & services" page.