Short answer
CostLoop Email Scanner uses read-only OAuth access to scan the Gmail or Outlook inbox you authorize. It processes message metadata and likely billing-message content during the scan, saves only the subscription details you choose to import, and lets you disconnect the integration later.
What the scanner reads
- All scanned messages: sender address, subject line, date, and provider message ID.
- Likely billing messages: text or HTML content may be processed to detect vendor, price, currency, billing cycle, and renewal context.
- Attachments: ordinary file attachments such as PDFs and images are not requested as part of scanner import.
What CostLoop stores
CostLoop stores the subscription records you choose to import, such as vendor name, price, currency, billing cycle, website, and renewal date when available. Raw email content is not stored or shared.
How account access is handled
The extension does not store raw OAuth refresh tokens. Provider access is handled by CostLoop's server-side token broker, and provider credentials are stored server-side in encrypted form. The extension uses temporary local state for pairing, scan consent, checkpoints, jobs, and scan results.
How to disconnect or revoke access
Disconnect Gmail or Outlook from CostLoop's Connect Email settings to delete the server-side integration and stored credentials. For Google, CostLoop attempts OAuth revocation where supported, and you can also remove access in Google Account permissions. For Microsoft, remove CostLoop from your Microsoft account or organization app-permission settings when you want to revoke the provider grant directly.
Related policies
For the full legal wording, read the Privacy Policy, Terms, and Security Overview.