Privacy by design
No whole-mailbox access, explicit retention for raw documents and human control over every prediction.
A proactive product should reduce what you remember without creating a permanent archive of everything you do. NeedPace separates temporary raw evidence, confirmed structured state, predictions and audit metadata so each category can have the right access and retention rule.
Manual quick add and selected receipt or PDF upload work without connecting Gmail or Outlook. A private forwarding address can process only messages you actively choose to send when the inbound provider is enabled. It is not a licence to read the rest of your correspondence.
An uploaded receipt, forwarded message body, attachment and raw extracted text belong to the importing user. Household membership, including owner or administrator status, does not automatically grant access. A confirmed derived product or Need may be shared at household scope while the underlying raw source stays personal.
Raw email bodies, attachments, receipts and documents have a configured maximum retention of 30 days. Structured provenance can be retained longer to explain corrections and predictions without keeping the full source. Deletion workflows use tombstones so an expired object is not silently re-exposed after a backup restore.
Data is encrypted during transmission and stored in private, encrypted object storage. Files are validated and scanned by ClamAV before OCR. Selected documents may be sent to configured external AI providers through stateless endpoints under no-training, no-hosted-file and zero-data-retention controls. This is not end-to-end encryption, and we do not describe it as such.
AI extraction must match a strict schema and is validated again by the application before candidate data can be confirmed. Important state is stored as database records rather than free-form model text. Low-confidence output goes to user confirmation, and uncertain product aliases are never silently merged.
Every prediction can be corrected, dismissed, snoozed or overridden. You can change quantities, correct products, mark a Need as no longer relevant and request account or household deletion. NeedPace does not use customer data to train proprietary models and has no implemented consent path that would permit such training in this MVP.
Manual quick add creates a structured Need without uploading a document.
Go to NeedPace