Privacy Policy for the Gmail™ Add-on „E-Invoice Preview“

1. Overview and Scope

This Privacy Policy applies to the Google Workspace / Gmail™ Add-on „E-Invoice Preview“ provided by creoggio.de.

The protection of your personal data and the confidentiality of your emails and business invoice data are our highest priority. The add-on is designed following the „Privacy by Design“ principle: all invoice data is processed exclusively locally within your Google session.

2. Controller

Responsible for data processing under the GDPR is the provider of this website. Full contact details and legal disclosures can be found in the About page.

3. Data Processing and Permissions (Google OAuth Scopes)

In order to provide its core functionality — displaying e-invoice data from received emails — the add-on requests exclusively the permissions strictly necessary for technical execution. In addition to application-specific Gmail™ permissions, two standard profile permissions from Google are required automatically for account connection:

Access to Google User Data

The add-on accesses exclusively the following Google user data:

• Content of the opened message and invoice attachments: When opening an email, the add-on reads the currently opened message to detect electronic invoice attachments (e.g. ZUGFeRD, Factur-X, or XRechnung) and parse the structured invoice data. No other emails in your mailbox are accessed.
• Google Account email address: The primary email address is provided by the Google platform for authentication and account association within the session.
• Google profile data: The default profile scope provided by Google is not evaluated by the add-on; no personal profile information is requested or processed.

Use and Purpose of Google User Data

The accessed data is used exclusively for the intended operation of the add-on:

• Message contents and invoice attachments are used solely to generate and display the structured e-invoice preview locally in the sidebar. They are not used for any other purpose.
• Data is never used for user profiling, personalized advertising, or training artificial intelligence or machine learning models.

Sharing, Transfer, and Disclosure of Google User Data

Your Google user data is not transferred, shared, or disclosed to creoggio or any other third parties:

• No transfer to third parties: Message contents, attachments, and account details are never shared, sold, or transferred to external servers, service providers, or other applications.
• Entirely client-side execution: All processing takes place exclusively locally within the Google Workspace runtime environment in your browser or on your device.
• Google infrastructure: Because the add-on operates within Google Workspace, the runtime environment and Gmail™ services are provided by Google LLC under its applicable privacy policies and terms of service.

The legal basis is Art. 6 (1) (b) GDPR (contract performance to deliver the add-on's functionality) and Art. 6 (1) (f) GDPR (legitimate interest in providing a reliable, user-friendly tool).

4. 100% Local Processing – No Server Uploads, No AI Processing

The add-on transmits no invoice or email data to servers of creoggio, third-party AI services (LLMs), or any other third parties. Use of Gmail and the Google Workspace runtime environment continues to take place via the Google platform.

The extraction of structured XML data from invoice attachments and the rendering of the e-invoice preview take place entirely client-side in your browser or within the Google Workspace runtime environment on your device.

We never store the contents of your messages or attachments, and data is never used to train artificial intelligence or machine learning models.

5. Compliance with Google API Services User Data Policy

The add-on's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. No Data Sharing, No Sale, No Advertising

Your data is neither sold, rented, nor used for advertising or marketing purposes. No user profiles are created, and no cross-app tracking takes place.

7. Retention Period and Uninstallation

Since no data is stored on our servers, there is no server-side retention period.

You can revoke permissions for the add-on at any time in your Google Account settings under Security > Third-party apps with account access or uninstall the add-on via the Google Workspace Marketplace.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

9. Contact

For questions regarding data privacy in connection with the Gmail™ Add-on, please contact us at any time via email at info@creoggio.de.

10. Trademark Notice

Gmail™ and Google Workspace® are trademarks of Google LLC. This add-on is an independent product by creoggio and is not affiliated with or endorsed by Google LLC.