Your data, and how it’s protected

What Peamo reads

When you connect a Gmail or Outlook account, Peamo reads the content of your emails — and any attachments it needs, such as a renewal letter — to find bills, contracts, subscriptions, and renewals. It looks for the things you’d want to keep track of: the provider, the recurring cost, the renewal date, and the category.

Email content is read only to detect your contracts, and only when you ask for a scan. To recognise a contract, the relevant email content is sent to our AI provider, Anthropic (Claude), for classification. There’s a step-by-step walkthrough of how a scan works on our How Peamo works page.

What Peamo never does

• Read-only access. Peamo only ever reads. It never sends, replies to, forwards, labels, moves, archives, or deletes anything in your inbox.
• It never emails anyone as you. Peamo does not send email on your behalf. (Peamo will send you its own messages — like a sign-in link or a renewal reminder — but those come from Peamo, never from your mailbox.)
• It doesn’t change your inbox. Connecting Peamo leaves your mailbox exactly as it was. Nothing is rearranged, marked read, or altered.
• No bank-account access. Peamo does not connect to your bank or use Open Banking. It works from your email, nothing more.
• No advertising, no selling your data. Your data is used to run Peamo for you — it is not sold, and Peamo uses no advertising cookies.

Where your data lives — and what isn’t kept

Your core account and contract data is stored in the United Kingdom (Supabase, London). The access credential for a connected inbox is held in an encrypted vault, kept separate from the rest of your data, and used only for the scans you authorise.

The full content of your emails is processed in memory during a scan and not stored afterwards — Peamo keeps the structured details it finds (provider, cost, renewal date, category), not the emails themselves. A couple of providers process data outside the UK: email content is classified by Anthropic (Claude) in the United States, and error monitoring (Sentry) runs in the European Union, with email addresses masked. Where data leaves the UK, Peamo relies on the safeguards set out in the Privacy Policy.

You can revoke access at any time

Connecting an inbox is your choice, and you can undo it whenever you like:

• Disconnect any inbox from your account settings at any time. When you do, you can also choose to erase the contracts that were detected from it.
• Delete individual contracts in the app whenever you want.
• Withdraw your consentto email access simply by disconnecting — that’s all it takes.
• Erase your whole account. For a copy of your data, or to delete your account entirely, email support@peamo.co.uk and we’ll action it.

Your rights under UK data protection law are set out in full in the Privacy Policy.

Who helps run Peamo, at a glance

Peamo relies on a small set of trusted providers. Each one only handles your data to do its job for Peamo, under Peamo’s instructions:

• Supabase — database, sign-in, and the encrypted vault for inbox credentials. United Kingdom (London).
• Anthropic (Claude) — reads email content during a scan to recognise contracts and renewals. United States.
• Google / Microsoft — provide read-only access to your Gmail or Outlook when you connect that account.
• Vercel — application hosting and scheduled tasks.
• Resend— delivers Peamo’s own emails, like sign-in links and notifications.
• Sentry — error monitoring with email addresses masked. European Union (Germany).
• Plausible — cookieless, privacy-friendly website analytics. Aggregate numbers only, no individual tracking.

The complete, always-current list — with the legal basis for each transfer — lives in section 6 of the Privacy Policy.

Questions?

Peamo is operated by Arcshore Limited. For anything about your data or privacy, email support@peamo.co.uk.