Bento Privacy Policy

Effective Date: September 25, 2026

Magic Red Panda LLC, a Delaware limited liability company that operates Bento (“Bento,” “we,” “us,” or “our”), values your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use heybento.com and our related products and services (together, the “Services”). It also explains how we handle data from a Google account if you choose to connect one to Bento.

Information We Collect

Information you provide

We collect information you provide directly, including:

• Your name, email address, and other contact information.
• Your phone number if you provide one or communicate with us by text message.
• Documents, receipts, invoices, images, and other files you upload, forward, or send to Bento.
• Messages you send to us, including support emails and text messages.
• Financial information you enter into the Services, including information used to organize records and plan cash flow.

Information from a connected Google account

If you choose to connect your Google account, Bento uses the Google permissions you grant to access Gmail only. For its email-based financial document feature, Bento accesses message identifiers, sender and recipient addresses, subject lines, dates, message bodies, and attachments in Inbox and Sent folders or labels. Bento does not access Drafts. Messages may contain personal, business, and financial information about you or other people who correspond with you.

Bento searches connected mail for potential financial information and examines messages that may contain invoices, bills, statements, receipts, quotes, payment reminders, or related records. Bento continues to monitor the inbox and sent folders for new messages that fit the criteria. The user can specify how far back Bento scans for qualifying emails. From relevant messages, we may extract and store information such as the counterparty, amount, due or payment date, reference number, document type, and attachment content, as well as a link or other reference to the source message. Bento stores a copy of the qualified message and attachments. Bento does not retain copies of messages or attachments it determines are not relevant.

We also receive the Google account identifiers and authorization credentials needed to connect and maintain the integration, such as email address and OAuth access/refresh tokens. We do not receive your Google password through this connection.

Information derived from Google data, including extracted financial records, classifications, summaries, forecasts, and any aggregated or de-identified data produced from it, is also covered by the Google-data practices described below.

Information collected automatically

When you use the Services, we may collect your IP address, device and browser information, operating system, and usage and log data relating to your interactions with the Services. We do not use tracking technologies for third-party advertising.

How We Use Information

We use information to operate the Services; process and organize financial documents; identify expected income and expenses; help you understand and plan cash flow; respond to your requests; provide support; maintain security; prevent fraud; enforce our terms; and comply with applicable legal obligations.

Specifically, we use Google user data to identify financial messages and attachments; extract and organize relevant information; connect it with other records; populate cash-flow views and related user-facing features. We use information derived from Google data for those same user-facing functions and any permitted internal, aggregated operational analytics. We do not use Google user data or information derived from it for advertising, to sell information, or to determine creditworthiness or make lending decisions.

We use AI systems to analyze, summarize, and categorize Gmail content for financial information. We do not use information obtained through Google Workspace APIs to develop, improve, or train generalized or non-personalized AI or machine-learning models, and we do not permit our service providers to do so.

How We Share Information

We do not sell personal information. We disclose information to the following types of recipients only for the purposes described in this policy:

1. Service providers. Providers that host the Services, store and secure data, deliver messages, process documents, and provide AI processing may receive the Google user data and derived records necessary to perform those functions for Bento. Bento filters Gmail content for financial keywords and for qualified content, we send the message with any attachments to AI system to analyze, summarize, and categorize the financial information. They are subject to appropriate confidentiality and data-use restrictions.
2. People you authorize. If you choose to share records or exports with another person, such as a bookkeeper, that recipient receives the information you select. Exports can contain Gmail-derived records, original attachments, or message text as relevant supporting information for the financial transaction.
3. Legal and security purposes. We may disclose information when necessary to comply with applicable law or legal process, or to investigate abuse and protect the security of Bento and its users.
4. Business transactions. Information unrelated to Google API access may be disclosed in connection with a merger, acquisition, or sale of assets as permitted by law. We will transfer Google user data, including information derived from it, as part of such a transaction only after obtaining the user’s explicit prior consent where Google’s applicable policies require it.

We do not transfer Google user data or derived information to advertising platforms, data brokers, or information resellers. We do not share it to support another party’s advertising, credit-worthiness assessment, lending, or generalized AI-model training.

Data Security

We use administrative, technical, and organizational measures designed to protect information from unauthorized access, loss, misuse, alteration, and disclosure. These measures include encryption in transit and at rest; restricted employee access; access controls for production systems; secure storage of OAuth tokens; logging and monitoring. Access to Google user data by Bento personnel is limited to permitted support, security, or legal circumstances. For support purposes, Bento personnel will not read the contents of a specific message or file unless the user has provided affirmative consent.

No system can be guaranteed to be completely secure.

Data Retention, Disconnection, and Deletion

We retain information for as long as needed to provide Bento, unless we need to keep it longer to comply with law, resolve disputes, or enforce our agreements.

While your Google account is connected, Bento retains copies of messages and attachments it identifies as relevant financial records, along with information extracted from them. Bento does not retain copies of messages or attachments it determines are not relevant.

If you disconnect your Google account, Bento stops accessing Gmail and deletes the authorization tokens it holds for that connection. Financial records previously imported into Bento remain in your account so you can continue using them. You may request their deletion without closing your Bento account by contacting privacy@heybento.com.

If you close your Bento account or make a verified request to delete its data, we delete your imported Gmail messages and attachments, extracted records, other account data, and stored authorization tokens from our active systems within 7 days, except for information we must retain for legal or other permitted reasons. Copies already in backups are removed through our normal backup expiration process within 30 days and are not used to provide the Services during that period.

Deleting information from Bento does not delete the original messages in your Google account.

Text Messaging (SMS/MMS)

If you choose to send us text or multimedia messages, including documents or photos, messaging is user-initiated. We may reply by text as needed to process your request or provide support. Message frequency varies, and carrier message and data rates may apply. You may opt out of text messages at any time by replying STOP. For help, reply HELP or contact support@heybento.com.

Your Rights and Choices

Depending on your location, you may have rights to access, correct, or update your personal information; request deletion; or object to or restrict certain processing. You can choose whether to connect a Google account and can disconnect it in Bento’s account settings. You can also revoke Bento’s access in your Google account settings. Contact privacy@heybento.com to make a privacy request.

Children’s Privacy

The Services are not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Changes to This Privacy Policy

We may update this policy from time to time. If we materially change how we use Google user data, we will notify affected users and obtain any consent required before using that data for the new purpose. We will update the effective date and provide other notice as required by applicable law.

Contact Us

Magic Red Panda LLC

Email: privacy@heybento.com

Website: https://heybento.com