Fetchpaw privacy policy
Fetchpaw is a browser extension that downloads your supplier invoices from billing pages you are already signed in to. This policy says what it reads, where that goes, and what it keeps.
What stays on your computer
- Your sign-ins. The extension never sees or stores passwords. It works inside the browser session you already have.
- Bank statements you drop into the panel are read in the browser and never uploaded anywhere.
- Settings: your suppliers, the page each supplier's invoices were found on, the account name you chose per supplier, the list of invoices already downloaded, the last 24 run reports and the activity log. They are kept in the browser's extension storage on this computer and are not synced.
- Your Fetchpaw session: after you sign in with Google, a session token is kept in the same local storage and sent only to Fetchpaw's server.
- Downloaded invoices are saved to your Downloads folder, or to a folder you choose.
Your Fetchpaw account
You sign in with Google. Google tells Fetchpaw's server (api.fetchpaw.app, run by Delta Forge) your email address, and the server keeps your email, your plan and, for each month, which suppliers were fetched (by name) and how many Jev steps and second opinions were used, so the plan's limits can be applied. Paid plans are billed by Stripe, which handles card details; Delta Forge never sees them.
What is sent, and to whom
While it looks for your invoices, the extension sends each step to Fetchpaw's server, which passes it to Jev by TypeSafe to decide which link or button leads to your invoices, and returns Jev's answer. The server does not keep the step's content. For each step Jev receives:
- the page's title and its address without the query string,
- a short excerpt of the page's visible text and the names of its links and buttons,
- the names of the files downloaded so far in this run, and
- the steps taken so far.
Second opinion: Claude by Anthropic. Only on a step where Jev is unsure or going in circles, the same items for that step (title, address, excerpt, link and button names, steps so far) go through Fetchpaw's server to Claude, which picks the next click. No screenshots are taken.
Before anything is sent, the extension masks email addresses, IBANs, card numbers (any run of 13 to 19 digits), API keys, tokens and other long opaque strings, and removes query strings from addresses. Invoice amounts and supplier names on the page can still be part of the excerpt.
If you press Ask Jev who these are on a bank statement, the payee names of the unrecognized payments (not amounts, dates or account numbers) are sent the same way to Jev to match them to suppliers. The statement itself never leaves your computer.
The extension has no analytics, no tracking and no advertising, and neither it nor Fetchpaw's server sells or shares data with anyone else.
TypeSafe's handling of what it receives is covered by its own terms and privacy policy at typesafe.ai. Anthropic's is covered by its commercial terms and privacy policy at anthropic.com/legal.
Permissions
The extension asks for access to a supplier's website only when you run it for that supplier, and only for that site. Its other permissions (tabs, tab groups, downloads, local storage, a monthly reminder, notifications, the side panel, and Google sign-in) serve the same single purpose of collecting your invoices.
Removing your data
Uninstalling the extension deletes everything it stored on your computer. To delete your Fetchpaw account and its usage records, write to contact@deltaforge.dev. In Settings, Forget fetched invoices clears the download history, and Forget next to a supplier clears what was remembered for it. Files already downloaded stay where they were saved.
This website
This website sets no cookies, runs no analytics and loads nothing from other sites. The hosting provider keeps standard server logs for security and operations.
Changes
If this policy changes, the new version will be published at the same address with a new date.