Built with your
privacy in mind
We access your inbox only to scan it, store as little as possible, and give you full control.
Google OAuth 2.0
You log in through Google's own screen. We never see your password. The OAuth flow is audited by Google and the same standard used by every major app that integrates Gmail.
Read-only access
We request the gmail.readonly scope — the most restricted Gmail permission. Pear cannot send emails, delete emails, modify labels, or change your inbox in any way.
No email storage
Raw email content is processed in memory and immediately discarded. We only persist the extracted metadata: vendor name, cost, currency, and billing date. Never the email body or subject.
Access disconnects after scan
Gmail access is used only during the scan and is not retained. You can also revoke access at any time from your Google Account at myaccount.google.com/permissions.
Encrypted database
Your account and subscription data is stored in Supabase (PostgreSQL), with row-level security policies ensuring you can only access your own data. Data is encrypted at rest and in transit.
GDPR compliant
Pear is built for EU users. You have the right to access, correct, export, and delete all data we hold about you. Email hello@pear.so for any data requests.
How AI classification works
When Pear scans your inbox, it sends the subject line and sender address of each email to the Claude AI (by Anthropic) to determine whether it is a subscription billing email. The body of the email is not included in this step.
For Deep Scan — where we attempt to find a cost for subscriptions initially marked “cost unknown” — the text content of a single billing email may be sent to Claude. This text is processed and immediately discarded; it is not stored by Pear.
Anthropic's API does not use inputs submitted via the API to train its models. You can read Anthropic's privacy policy at anthropic.com/privacy.
Our infrastructure partners
Supabase
Authentication and database. Your account data and subscription results are stored here with row-level security. Hosted on AWS in the EU region.
Anthropic (Claude)
AI classification of subscription emails. Subject lines and senders are sent during the scan; email body text only during Deep Scan. Not used to train AI models.
Stripe
Payment processing. We never see or store your card details. Stripe is PCI DSS Level 1 certified.
Vercel
Application hosting. All traffic is served over HTTPS with TLS 1.2+. Vercel is SOC 2 Type 2 certified.
Questions about security?
If you have a security concern or want to report a vulnerability, email us at hello@pear.so with the subject line “Security.” We take all reports seriously and will respond within 48 hours.