Contract Notes

Privacy policy

Effective 28 September 2026

Contract Notes is a private tool used by one person, its owner, to record their own share trades. This policy explains what it does with the Google data it can reach.

What it accesses

Contract Notes connects to one Gmail mailbox, set up by the owner for this purpose, using Google's read-only Gmail permission (gmail.readonly). It can read the messages and attachments in that mailbox. It cannot send, delete, label, change or forward anything, and it has no access to any other Google account or service.

How it uses that data

It reads the messages in the mailbox to find trade confirmations from brokers. From each confirmation it takes the broker, the security, whether it was a buy or a sell, the quantity, the price, the fees and the trade date, and adds them to the owner's personal investment records. Account numbers and names printed on the confirmation are not copied into those records. It also keeps a list of the message IDs it has handled, so it never processes a message twice.

A confirmation it cannot read automatically is saved in full for the owner to review by hand. The owner may use software of their choosing for that review, including an AI assistant. Messages that are not trade confirmations are skipped.

Where it is stored

Contract Notes runs on the owner's own computer. The access token, the trade details and any saved confirmations are stored there. None of it is sent to a server run by Contract Notes, because there is none.

Sharing

Google user data is not sold and not used for advertising. It is not shared with anyone, apart from the review tools the owner chooses, described above. Contract Notes does not use Google user data to develop, improve or train AI or machine learning models.

Contract Notes' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Keeping and deleting data

Trade details are kept as part of the owner's investment records. Access can be withdrawn at any time from the Google Account's Security settings, under third-party connections, after which Contract Notes can no longer read the mailbox.

These pages

This website sets no cookies and runs no analytics. The hosting provider keeps standard request logs.