Security & Google Permissions
CryptoDeposit Tracker, operated by Rave Fusions Inc, cannot send, receive, withdraw, or move cryptocurrency, and never asks for wallet passwords, seed phrases, or private keys. It only reads deposit notification emails and writes structured records to a Google Sheet you control.
What each Google permission is used for
| Permission | Used for |
|---|---|
| Gmail — read only | Detects and parses supported wallet deposit notification emails (sender, subject, amount, timestamp). Messages are never modified, sent, or deleted. |
| Sheets | Creates the "CryptoDeposit Tracker" spreadsheet in your account and writes parsed deposit rows and summaries to it. |
| Apps Script projects | Creates and updates the Apps Script project that runs your scheduled deposit scan. This runs under your own Google account, not ours. |
| Script external request | Lets the deployed script send scan results, logs, and error reports back to the CryptoDeposit Tracker API so your dashboard stays up to date. This is requested by the generated script manifest for its runtime only. |
Where your data lives
- Deposit records are stored securely in your web application database for instant dashboard reporting, forecasting, and CSV exports, and are synced to the Google Sheet in your Google Drive.
- Google OAuth access and refresh tokens are encrypted at rest in our database and are never exposed to the browser.
- All traffic to the site and the Google OAuth flow is encrypted in transit over HTTPS.
- We do not sell deposit or account data, and do not use Gmail data for advertising, in line with the Google API Services User Data Policy.
Revoking access
You can revoke CryptoDeposit Tracker's Google access at any time from your Google Account permissions page. To request deletion of your account data, contact support@cryptodeposittracker.com.