DueBack privacy
Only the promise you choose to share.
DueBack does not read your inbox. Raw text and files are deleted after successful extraction and have a maximum 24-hour retention window. A structured case expires seven days after intake and its automatic database TTL is scheduled no later than 30 days afterward. You can delete an activated case sooner from its controls.
Nothing is sent to a company.
Only the reference, amount, and currency listed in the approved plan are shared.
Google’s Gemini service processes the source you submit to extract a draft. Gemini has no contact tools and cannot approve, send, or close the case.
Delete removes the case and its nested operational records. A hashed deletion receipt remains for up to 30 days so deletion requests can be audited without retaining the case content.
Operational records use identifiers and hashes, not uploaded files or full promise text.
The merchant is a controlled sandbox, not a real company. Merchant confirmation is not bank settlement.