How OryzaPay handles your information.

1. Who we are

OryzaPay ("we", "us") is a bill and payment organizer built in Ontario, Canada. This policy explains what personal information we collect through oryzapay.com, oryzapay.ca, and our apps (together, the "Service"), why we collect it, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Questions or requests: hello@oryzapay.ca.

2. What we collect

Information you give us

• Account details: your name and email address, and a password. Your password is stored only as a salted one-way hash, so we can't read it.
• Bills and payments you add: the name of what you owe, the category, amount, due date, reminder preferences, any notes, and, if you choose to add it, the account or phone number you have with that company (never enter a password or PIN). It is used only to fill in messages you write to that company.
• Contracts you upload: a PDF you choose to upload. We read it once, keep only the extracted details and summary (provider, plan, prices, dates, fees, cancellation terms), and do not store the PDF itself.
• Profile photo, if you add one.
• Savings you record. OryzaPay notes things it spotted (a bill above its contract, a price rise, a cheaper plan) and, only if you tell us, the amount you saved. Nothing is counted as saved unless you confirm it.
• Bank statements you add. If you add a statement file (CSV, OFX or PDF) to see your spending, we keep the transactions in it: the date, description and amount of each one, the category each was sorted into, and which account each statement is for (the bank, whether it is a credit card or a chequing account, and the last four digits of the number if the file shows it, never the full number). You can name, edit or remove each account. We do not ask for, and never receive, your online banking login, and the statement file itself is not kept after it is read. If you turn on the optional spending email, we email you a short summary of your recent transactions (store names, amounts and categories) at the address on your account. You can switch it off at any time, or with the link in each email.
• Contact: messages to your own companies. For a bill from a company OryzaPay recognizes, we show that company's phone numbers and contact page, taken from the company's own website, and can write a message with your name, email, phone, address, account number and that bill's details filled in. You can copy it or open it in your own email app. If a company publishes a customer-service email address, you can instead ask OryzaPay to send it for you, after you have read it and said yes: it goes only to that company's published address, from OryzaPay, with your own email as the reply address and a copy to you. We keep a record of each message sent this way (the company, the time and the text) so you can see what was sent and so we can deal with misuse; it is deleted with your account. You can also add a contact by hand in Contact: the name you type, and, if you choose, a phone number, email address or web address you type for them (a landlord, for example). These are kept with your account, shown only to you, and deleted with it or when you remove the contact. OryzaPay never sends anything to an address you typed in; it only opens the message in your own email app. Nothing is ever sent to anyone else.
• Phone notifications. If you turn on bill reminders in the app, we keep a notification address for your phone (a random code from your phone's notification service, not your phone number) so we can send reminders to it. Turn it off in the app, or log out, and it is removed.
• Waitlist email, if you sign up for early access without creating an account.
• Payment details, if you subscribe. Payments are handled by Stripe, which collects your card details directly. We never see or store your full card number; we keep only a Stripe customer ID, your subscription status and its renewal date.
• Messages you send us, for example through the contact form on our website or by email. From the contact form we keep your name, your email address and what you wrote, so we can reply and keep a record of what was asked, and a copy is emailed to the people who run OryzaPay. These messages are kept on their own, not linked to an account (see section 7 for how long).

Information from Gmail (only if you connect it)

See section 3.

Technical information

Like most services, our servers receive your IP address and basic request details when you use the Service. We use a single sign-in session cookie to keep you logged in. We do not use advertising or cross-site tracking cookies.

3. Connecting your email, and forwarding bills

Connecting Gmail is optional and always your choice. We ask for one permission: read-only access to your Gmail (the gmail.readonly scope). We cannot send, delete or change anything in your mailbox.

• What we do: search your inbox for emails that look like bills or statements, including attached PDFs, and read them to find the company, amount and due date. This happens when you connect, when you press "Check now", and automatically once a day.
• What we keep: for each suggested bill, the sender, the subject line (shortened), the amount, the due date, and the category. We do not store the body of your emails or their attachments. Once you add a suggestion to your bills or dismiss it, we remember only that you handled it so it doesn't come back.
• Your Google sign-in tokens are stored, encrypted, so we can keep checking for new bills until you disconnect.
• Only your own mailbox: the connected Google account must match the email address on your OryzaPay account.
• You review everything: suggestions are never added to your bills without you pressing "Add this bill".

Outlook / Microsoft 365. You can instead connect an Outlook, Hotmail or Microsoft 365 mailbox. We ask for read-only access (Mail.Read) through Microsoft. It works the same way as Gmail: we look for bill-like emails in your inbox, keep only the sender, shortened subject, amount, due date and category of each suggestion, store Microsoft sign-in tokens encrypted, and never send, change or delete your email. You can remove OryzaPay's access in your Microsoft account settings, or by deleting your OryzaPay account.

Forwarding. If you prefer not to connect an inbox, you can get a private OryzaPay address and forward bills to it. We read the messages sent to that address (including a forwarded PDF statement) the same way, keep only the same extracted fields, and do not keep the email itself, apart from short confirmation notices (such as a Gmail forwarding code) that are shown to you and expire after seven days. Anyone who knows your address can send mail to it, so keep it private; you can replace or turn off the address at any time.

Bank alert emails (optional, off until you turn it on). If you switch on "Bank alert emails" in Spending, we also look in your connected inbox, or at what you forward to your OryzaPay address, for the purchase, deposit and e-Transfer alerts your bank or card issuer sends, so those transactions appear the day they happen. We only open emails sent by known bank and card senders, and only ones that state a dollar amount. For each one we keep only the amount, whether money went out or came in, the store or person named, the date, the bank, whether it is a card or an account, and the last four digits of the number if the email shows them. We do not keep the email, and we never keep a full card or account number. When you later add the statement for that period, it replaces the alert's copy so nothing is counted twice. You can switch it off at any time, and you can remove what it added under Spending → Statements you added → Bank alert emails.

To stop scanning, email us at hello@oryzapay.ca from your account email and we'll disconnect Gmail and delete the stored tokens and suggestions. You can also remove OryzaPay's access yourself at any time in your Google Account under Security → Third-party access.

Google API Services User Data Policy. OryzaPay's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Gmail data only to show you bills you can add to your own account; we do not use it for advertising, we do not sell it, we do not use it to build or train AI models, and no person at OryzaPay reads your email unless you ask us to help with a specific problem, or it is needed for security or to follow the law.

4. How we use AI

We use AI models from Anthropic to read bill emails and contract PDFs, and to write the plain-language summaries and message drafts you see. Specifically:

• Bill emails: the sender, subject and text of an email that looks like a bill (and any attached PDF text) are sent to Anthropic's API to decide whether it is a bill and to extract the amount and due date.
• Contracts: the text of a PDF you upload (or the PDF itself, if it is a scan) is sent to Anthropic's API to produce a summary.
• Bank alert emails (only if you turn them on): the sender, subject and a shortened copy of the text of an email from a bank or card issuer that states a dollar amount are sent to Anthropic's API to read the amount, direction, store or person, date and account. Emails that are not from a known bank sender, or that contain no dollar amount, are never sent.
• Statements: to sort your spending into categories, only the store names from your statement (such as "Loblaws") are sent to Anthropic's API, never amounts, dates or account details. If you add a PDF statement, its pages are sent to Anthropic's API to list the transactions in it, and you check that list before anything is saved.
• Deals and drafts: to look for better plans, we send details of your plan (company, plan name, prices, dates) and a general location (Ontario) to a web-search-enabled AI. We do not send your name or email for the search. To draft a message to your provider, we send your first name and the contract details you already have.

Under the commercial terms we use, Anthropic does not train its models on this data. AI can make mistakes, so we show its results as suggestions for you to check, never as final facts.

5. Why we use your information

• To provide the Service: show your bills, send reminders, read contracts, and compare prices.
• To send you emails you'd expect: sign-up verification codes, bill reminders, contract and promotion ending alerts, and notices about found bills.
• To keep the Service secure, prevent abuse, and fix problems.
• To meet legal obligations.

We do not sell your personal information, rent it, or use it for advertising.

6. Who we share it with

Only with service providers who help us run OryzaPay, and only what they need:

• Hosting: Render, which hosts our servers and database.
• Email delivery: an email service that sends the messages described above.
• Payments: Stripe, only if you subscribe to a paid plan.
• Phone notifications: Expo, Apple and Google, only if you turn on reminders in the app. They deliver the notification; it contains the name, amount and due date of the bill.
• Google and Microsoft: to connect and read your Gmail or Outlook mailbox, when you choose to.
• Anthropic: for the AI features described in section 4.

We may also disclose information if the law requires it, or to protect the safety of our users and the Service. If OryzaPay is ever sold or merged, your information would only transfer under promises at least as protective as these.

Where your data is processed. Some of these providers may store or process information outside Canada, including in the United States, where it may be accessible to courts and authorities under local law.

7. How long we keep it

We keep your information while your account is open. Contract PDFs are not kept after they are read. You can delete your account yourself at any time in Settings → Delete account. This permanently removes your account, bills, payment history, savings history, spending transactions, contract summaries, email connection and suggestions, forwarding address, and profile photo right away, and we tell Google to cancel OryzaPay's access to your Gmail. You can also email us and we'll do it for you within 30 days. Our automatic database backups are overwritten within 48 hours of that, so a deleted account is gone from them too.

Messages sent through the contact form are not part of an account, so deleting your account does not remove them. To have one deleted, email us and we will remove it within 30 days.

8. Keeping it safe

Connections to OryzaPay are encrypted with HTTPS. Passwords are stored as salted hashes, and the Google sign-in tokens we keep for Gmail import are encrypted. Sign-in sessions use secure, HTTP-only cookies. Access to production data is limited to the people who run the Service. No online service can promise perfect security, but if something goes wrong that could harm you, we will tell you and the authorities as the law requires.

9. Your choices and rights

You can ask us to see the personal information we hold about you, correct it, delete it, or stop using it for something you agreed to. You can also edit or delete bills and contracts in the app yourself, delete your whole account in Settings, and change your reminder settings at any time. For anything else, email hello@oryzapay.ca from your account email and we'll respond within 30 days.

If you're not satisfied with how we've handled your information, you can contact the Office of the Privacy Commissioner of Canada.

10. Children

OryzaPay is not meant for anyone under 18, and we don't knowingly collect information from children. If you believe a child has given us information, tell us and we'll delete it.

11. Changes to this policy

If we change this policy in a way that matters, we'll update the date at the top and, for significant changes, email you or tell you in the app before it takes effect.

12. Contact

OryzaPay, Ontario, Canada — hello@oryzapay.ca

See also our Terms of Service and our security overview.