Privacy Policy

CleanTab is built so that your financial records stay yours. This policy explains, in plain language, what the app touches and what it does not.

The short version

CleanTab stores your receipts and income entries in your own Google Drive. There is no CleanTab database holding copies of them. We cannot read the rest of your Drive.

What we access

• Your email address and basic profile, through the standard Google sign-in scopes, so we can show who is signed in.
• A single Drive folder, through Google'sdrive.file scope. This scope only grants access to files and folders the app itself creates. It cannot see any other file in your Drive.

What we store on our servers

Your receipt photos, amounts, categories and income entries are written directly to your Google Drive. We do not keep a server-side copy of your receipts or income data. What CleanTab does store on its side is deliberately small: your email address and your plan status (when your trial started, whether you are on Free or Pro, usage counters like how many receipt scans you have used this month, and, if you subscribe, the technical payment and subscription identifiers Razorpay gives us, never your card or UPI details), held in a managed datastore (Upstash). To keep the app fast, the same datastore briefly caches the technical identifiers of the files CleanTab itself created in your Drive: identifiers only, never their contents. If you turn on push notifications, we also store your browser's push subscription there (see below). Sign-in state lives in secure, http-only cookies on your device. That is the complete list; your financial records, your PAN, and any tax details you enter live in your own Drive and are never on our servers.

Tax and identity details you enter

To work out your tax and to name the right taxpayer on the pack you hand your accountant, CleanTab lets you enter details such as your PAN, your business name, figures like your salary and the tax deducted on it, and, for a registered business, its GSTIN, TAN or CIN. Your PAN is a government identifier, so we treat it plainly: it is stored only in your own Google Drive settings, printed on the CA pack you choose to share, and never sent to or held on CleanTab's servers. We check its format so a typo does not reach your accountant, and nothing more. Every one of these fields is optional, and you can change or clear any of them in the app at any time.

Receipt reading (OCR)

When you capture a receipt, CleanTab can read the amount, merchant and GST off the image for you. To do this, the image is sent once, at capture time, to Google's Gemini API and the extracted fields are returned to your device. Neither CleanTab nor the OCR step stores the image or the results anywhere other than your own Drive. If you prefer, skip it entirely: type the amount yourself and no image is sent anywhere except your Drive.

Bank statement import

Statement files (CSV, Excel or PDF) are read on your device; they are not uploaded to CleanTab. After an import, the original statement file is archived to a Statements folder inside your own CleanTab Drive folder, so you can always find what a row came from; that copy is in your Drive, not with us. If you import a statement from a link, the file is fetched through our server solely to hand it to your device, and is not stored. A password you enter for a protected PDF is used on your device to open the file and goes no further.

Website analytics

The cleantab.in website uses two measurement tools. Google Analytics counts visits and shows which pages people find useful: it sets a cookie and records your approximate location, device and the pages you view. Microsoft Clarity goes further and records how a page is used, including mouse movement, clicks, scrolling and a replay of the page itself, so we can see where people get stuck. Both process that data on our behalf.

Neither runs in the CleanTab app, only on this website. That boundary is deliberate: it means no measurement tool can ever see a receipt, an income entry or a tax figure. Those live in your own Google Drive and are never sent to us, to Google Analytics or to Clarity. There are no advertising trackers on either the website or the app, and nothing here is sold or shared for advertising.

Neither loads until you say yes. The first time you visit, a notice asks; decline and nothing is fetched from Google or Microsoft at all, so there is nothing to set a cookie or record a session. Your choice is remembered on your device, and you can change it by clearing site data for cleantab.in. You can also block both with any tracker blocker, or with the Do Not Track setting in your browser, without losing any part of the site.

The tax calculator on this website is masked from session recording, so the figures you type into it are never captured even after you have accepted.

Emails

Emails from CleanTab (the welcome note when you join, payment and plan confirmations, and the CA summary you can choose to send from the app) are delivered through Resend, our email provider, which processes the recipient address and message for delivery. Support mail to support@cleantab.in is forwarded to our inbox by ImprovMX.

Push notifications

Push notifications are off until you turn them on. When you do, your browser issues CleanTab a subscription so reminders (an advance-tax date approaching, a trial ending, a weekly nudge to snap your receipts) can reach your device even when the app is closed. We store that subscription, which is a delivery address from your browser's push service, the keys your browser needs to decrypt a message, and which reminder categories you enabled, in our managed datastore, and use it for nothing but sending those reminders. A notification never carries your financial detail in its text. Turn the switch off in Settings, or block notifications in your browser, and the subscription is deleted.

What we do not do

• We do not sell or share your data with advertisers.
• We do not read files outside the CleanTab folder.
• We do not use your receipts to train anything.

Deleting your data

Because everything lives in your Drive, you delete it the way you delete any Drive folder. You can also revoke CleanTab's access at any time from your Google account permissions page.

Contact

Questions about privacy? Email support@cleantab.in.