Privacy Policy for the Gmail Add-on „E-Invoice Preview“

1. Overview and Scope

This Privacy Policy applies to the Google Workspace / Gmail Add-on „E-Invoice Preview“ provided by creoggio.de.

The protection of your personal data and the confidentiality of your emails and business invoice data are our highest priority. The add-on is designed following the „Privacy by Design“ principle: all invoice data is processed exclusively locally within your Google session.

2. Controller

Responsible for data processing under the GDPR is the provider of this website. Full contact details and legal disclosures can be found in the About page.

3. Data Processing and Permissions (Google Scopes)

In order to provide its core functionality — displaying e-invoice data from received emails — the add-on requests the minimum required permissions (OAuth Scopes) via the Google Workspace platform:

• Contextual execution in Gmail: Enables the add-on to display its user interface in the Gmail sidebar when an email is opened.
• Read access to the currently opened message and its attachments: Used exclusively to identify, parse, and display the attachment of the selected email in the preview window.

The legal basis is Art. 6 (1) (b) GDPR (contract performance to deliver the add-on's functionality) and Art. 6 (1) (f) GDPR (legitimate interest in providing a reliable, user-friendly tool).

4. 100% Local Processing – No Server Uploads

No invoice or email data is transmitted to servers of creoggio or any third parties.

The extraction of structured XML data from invoice attachments and the rendering of the e-invoice preview take place entirely client-side in your browser or within the Google Workspace runtime environment on your device.

We never store the contents of your messages or attachments.

5. Compliance with Google API Services User Data Policy

The add-on's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. No Data Sharing, No Sale, No Advertising

Your data is neither sold, rented, nor used for advertising or marketing purposes. No user profiles are created, and no cross-app tracking takes place.

7. Retention Period and Uninstallation

Since no data is stored on our servers, there is no server-side retention period.

You can revoke permissions for the add-on at any time in your Google Account settings under Security > Third-party apps with account access or uninstall the add-on via the Google Workspace Marketplace.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

9. Contact

For questions regarding data privacy in connection with the Gmail Add-on, please contact us at any time via email at info@creoggio.de.