Privacy policy

Effective 23 October 2026

finance-mcp (this site, mcp.wheatleyweb.com) is a private service run by one person for their own finances. The only user is its owner. This policy explains what it reads, what it keeps and why.

What it accesses

• Bank and card data: accounts, balances and transactions, read-only through TrueLayer after the owner consents at their bank, or from statement files the owner uploads.
• Gmail (Google scope gmail.readonly): only messages from a fixed list of receipt senders (Apple, PayPal, Amazon and Screwfix) are fetched. Other mail is never requested. It cannot send, delete or change mail.

How Google user data is used

• Each receipt is read in memory to extract the merchant, date, amount, order reference and item names, which are used to label the owner's own card transactions (for example "Apple: iCloud+ 200GB").
• Message bodies, headers and attachments are not stored. Only those extracted fields are kept.
• Extracted receipt details can be shown to the owner's own AI assistant (Claude, by Anthropic) through the owner's authenticated connection, when the owner asks about their spending. That is the feature this access exists for.
• Google user data is not sold, not used for advertising, not used to train or improve AI or machine-learning models, and not read by anyone other than the owner.

finance-mcp's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

• Data is held on a private server and protected in transit with TLS. Access to Google and to banks uses refresh tokens that are encrypted at rest with AES-256-GCM.
• Every request needs the owner's password-protected sign-in or a private access token. Access is logged without logging the data itself.

Retention and deletion

• Data is kept until the owner deletes it. Disconnecting Gmail revokes the Google token and deletes it from the server. Access can also be revoked at any time at myaccount.google.com/permissions.
• Bank consents expire after 90 days unless renewed, and can be revoked at the bank or with TrueLayer.

Contact

Questions about this policy: the operator of this site.