How ChaseOne handles your data
Last updated 30 September 2026.
This notice covers both parts of ChaseOne: this website and the app. For anything about your data, write to hello@chaseone.io.
Two parts: the website and the app
The website, chaseone.io, is the public site you are on now. It explains what ChaseOne does and offers free tools anyone can use without an account: the late-payment interest calculator, the “client not paying” guide, and its letters page. It has no sign-in, and it never asks for or receives anything from your Google account. What it collects is described under The website and the free calculator, below.
The app, app.chaseone.io, is the ChaseOne service you sign up for. You copy us in when you send an invoice; the app tracks its due date, adds the interest if it is paid late, and drafts each reminder for you to approve before it goes, from your own email address. It needs an account, and it is the only part of ChaseOne that uses Google sign-in or your Gmail. That is described under The app, and your Google account.
The legal basis and Your rights apply to both.
The app, and your Google account
What we receive from Google.If you sign in with Google, we receive your name, your email address and your profile picture. If you connect Gmail, we also receive permission to send email from your address (Google’s gmail.send permission). That permission lets us send, and nothing else. We never read, list, search or change anything in your mailbox.
What we use it for. Your name, email address and picture are used to create your account, sign you in, and show you who is signed in. The Gmail permission is used for one thing only: to send the payment reminders you have reviewed and approved in the app, from your own address, to the client they are addressed to. We use Google user data only to provide these features, and for no other purpose.
What we never do with it. We do not sell Google user data. We do not use it for advertising, and we do not use it to build profiles. None of our staff read it, except with your permission, where needed for security, or where the law requires it.
Artificial intelligence.ChaseOne uses an AI model, Google’s Gemini, to read invoices and to draft reminders. It is given the invoice details and the business name you enter, never Google user data. No Google user data, whether raw, aggregated, anonymised or derived, is used, shared, transferred or sold to create, train or improve any machine-learning or artificial-intelligence model, foundational, generalised or otherwise.
Limited Use. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. ChaseOne’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who we share it with. We do not share, transfer or disclose Google user data to anyone, except to the service providers that run the app for us, and only for that purpose. Only raw data is shared, and only this:
- Hosting provider, DigitalOcean, in Frankfurt, Germany (EU): stores all of it for us (your name, email address, profile picture and the encrypted Gmail token) in the app’s database.
- Email delivery provider, Postmark: receives your name and email address, to deliver the app’s own emails to you, such as a password reset or an invitation.
- Your own clients, when you approve a reminder: it is sent through your Gmail, so they see your name and email address as its sender, as with any email you send yourself.
We do not share aggregated or anonymised Google user data with anyone. We do not share any Google user data with advertisers, data brokers, analytics providers or AI providers.
Each acts only on our instructions, under its own data processing terms. Beyond that, we disclose data only if the law requires it.
How we protect it.All traffic to and from the app is encrypted with TLS. The Gmail access token is encrypted with AES-256-GCM before it is stored, and it is decrypted only at the moment an approved reminder is sent. The sign-in tokens Google issues are encrypted at rest too. The database is DigitalOcean’s managed PostgreSQL in Frankfurt, encrypted at rest; every connection to it is encrypted and needs credentials that only the app’s own services and the people who operate the service hold.
How long we keep it, and how to remove it.We keep your account details while you have an account. You can disconnect Gmail at any time in the app’s Settings → Email: we delete the token and revoke the permission at Google straight away. You can also remove ChaseOne from your Google account at myaccount.google.com/permissions. To delete your account and everything we hold about it, write to us. When a workspace is deleted, every Gmail permission it holds is revoked first.
The website and the free calculator
The invoice you upload.It is sent to Google’s Gemini model once, to read four fields from it — the total, the due date, the invoice number and who owes you — and is then discarded. We do not store the file, and it does not appear in our logs. Google processes it under its API terms and does not use it to train models.
The figures you enter. Amounts, dates and names typed into the calculator stay in your browser. When you ask for the payment-request emails, those figures are sent to our server and to Gemini to write the drafts, and are not kept afterwards.
The contact form, and report requests. If you write to us, or ask for your report, your email address — with your message, or with the figures the calculator showed you — is delivered by Formcarry, a form service, and kept so we can reply and follow up once. We keep it until you ask us to delete it. We do not send newsletters.
Analytics. We use Umami, which we run ourselves on our own servers in the EU. It sets no cookies and stores nothing on your device, it does not record your screen, and it never receives the figures, the invoice, or your email address.
Server logs.Our servers log each request’s path, status and timing, and the outcome of a parse or a draft, for a short time, to keep the site working. Logs carry no invoice content.
The legal basis
Running the app for you, including the Google sign-in and sending the reminders you approve, is needed to provide the service you signed up for. Replying to a message you sent us and running the calculator you asked for are our legitimate interest, and yours. Following up after a contact is with your consent, given when you send the form, and you can withdraw it by telling us.
Who else processes the calculator’s data
Google (Gemini, invoice reading and email drafting), Formcarry (the contact form), and DigitalOcean (hosting, Frankfurt). Each acts on our instructions under its own data processing terms. Analytics is not on this list any more: we run it ourselves, so nobody else processes it.
Your rights
You can ask what we hold about you, ask us to correct or delete it, or object to our using it. Write to the address above and we will answer promptly.
About the calculator
The figures it produces are estimates based on the statutory rules for late commercial payments. They are not legal advice, and contract terms that set a substantial remedy for late payment can replace the statutory one.