Privacy Policy

Effective date: May 1, 2026 · Last updated: May 1, 2026

TenFortyCat ("we", "us", "our") is a Google Sheets add-on that categorizes bank transaction descriptions for IRS Schedule C. This policy explains what data we collect, how we use it, and who we share it with.

Google API Limited Use. Our use of information received from Google APIs is limited to providing and improving TenFortyCat. We do not use Google user data for advertising, and we do not transfer Google user data to third parties except as necessary to provide the service.

1. Data We Collect

Google account email — collected during OAuth sign-in for account identity and quota enforcement.
Transaction description strings — the text you pass to =TENFORTYCAT(), such as "STARBUCKS #12345" or "IKEA EMERYVILLE CA". We do not collect account numbers, balances, or any bank credentials.
Optional context strings — the second argument to =TENFORTYCAT(description, context) if you provide one, such as "client lunch".
Usage counts — number of rows classified this month, used to enforce your plan quota.
Classification results — the Schedule C category we return for each description, stored to power deduplication and cache.

2. How We Use Your Data

Authenticate your Google account and provision your user record.
Classify transaction descriptions and return Schedule C category suggestions.
Enforce monthly row quotas.
Improve classification accuracy (aggregate patterns only — no individual descriptions are used for model training without explicit opt-in).

3. Third-Party Sub-Processors

We send transaction description strings to the following third parties to provide the service:

Anthropic, PBC — transaction descriptions are sent to Anthropic's Claude API for AI-based Schedule C classification. Anthropic acts as a data processor on our behalf. Per Anthropic's API usage policies, API inputs are not used to train their models. See Anthropic's Privacy Policy.
Neon (PostgreSQL) — our database provider stores your email, usage counts, and classification results. Data is hosted on AWS infrastructure in the United States.
Railway — our application hosting provider. Application traffic passes through Railway's infrastructure.

We do not sell your data to any third party.

4. Data Retention

We retain your account data and classification history for as long as your account is active. If you disconnect TenFortyCat from the add-on menu, your account is marked inactive. To request full deletion of your data, email us at hello@tenfortycat.com and we will delete your record within 30 days.

5. Cookies

TenFortyCat is a Google Sheets add-on and does not use cookies.

6. Children's Privacy

TenFortyCat is not directed at children under 13. We do not knowingly collect personal information from children.

7. California Residents (CCPA)

We do not sell personal information. You have the right to know what personal information we hold about you and to request deletion. Contact us at hello@tenfortycat.com to exercise these rights.

8. Changes to This Policy

We may update this policy as the service evolves. Material changes will be noted with an updated effective date above. Continued use of the service after changes constitutes acceptance.

9. Contact

Questions about this policy: hello@tenfortycat.com