Terms of Service

• "Service": The MightySmall website, web application, Gmail add-on, Outlook add-in, and all related services
• "We," "Us," "Our": MightySmall and its affiliates
• "You," "Your": The individual or business entity using the Service
• "Account": Your registered user account on the Service
• "Invoice Data": Data extracted from invoices in your email, including supplier names, amounts, dates, and line items
• "User Content": Data you provide or upload, including invoices, settings, and preferences

2.1 Binding Agreement

By creating an account, accessing the Service, or using any features (including connecting Gmail or Outlook), you enter into a legally binding agreement with MightySmall. If you are using the Service on behalf of a business, you represent that you have authority to bind that business to these Terms.

2.2 Age Requirement

You must be at least 18 years old to use the Service. By using the Service, you represent and warrant that you are 18 or older.

2.3 Changes to Terms

We may update these Terms from time to time. If we make material changes:

• We will notify you via email at least 30 days before changes take effect
• We will update the "Last Updated" date at the top
• Continued use after the effective date constitutes acceptance of the new Terms
• If you do not agree, you may terminate your account before the effective date

3.1 What We Provide

MightySmall is a price transparency and invoice management platform that:

• Detects invoices in your Gmail and/or Outlook email
• Extracts invoice data (supplier, amount, date, line items) from PDFs
• Organizes your invoices in a dashboard
• Compares your pricing against anonymized market benchmarks
• Identifies potential cost savings opportunities
• Facilitates group buying programs (optional, requires separate consent)

3.2 What We Do NOT Provide

3.3 Beta Features

Some features may be marked as "Beta" or "Experimental." These features are provided "as-is" with no warranties and may change or be discontinued at any time without notice.

4.1 Registration

To use the Service, you must:

1. Create an account using Google or Microsoft OAuth
2. Provide accurate and complete information
3. Maintain the security of your account credentials
4. Promptly update any changes to your information

4.2 Account Responsibility

You are responsible for:

• All activity that occurs under your account
• Maintaining the confidentiality of your login credentials
• Notifying us immediately of any unauthorized use
• Ensuring your email account (Gmail/Outlook) is secure

4.3 One Account Per User

You may not create multiple accounts to circumvent pricing limits, trial periods, or suspension. We may suspend or terminate duplicate accounts without notice.

5.1 Gmail API Access

By connecting your Gmail account, you grant MightySmall the following permissions:

Gmail Scope: gmail.readonly

This read-only permission allows us to:

• Read message metadata across ALL folders and labels - Including Inbox, Archive, custom folders, and auto-archived emails (required to find invoices in organized mailboxes)
• Access delegated mailboxes - If you have delegate access to other Gmail accounts (e.g., [email protected])
• Access Google Groups - If you're a member of collaborative inboxes (e.g., [email protected], [email protected])
• Download PDF invoice attachments

We explicitly do NOT:

• Send emails on your behalf
• Delete or permanently modify your emails
• Sell, rent, or share your Gmail data with third parties
• Use your Gmail data for advertising or marketing purposes
• Transfer Gmail data to third parties except to service providers (Railway for hosting, database, and object storage) under strict confidentiality
• Allow humans to read your emails except for security/abuse investigations

5.2 Microsoft Graph API Access

By connecting your Outlook account, you grant MightySmall the following permissions:

Microsoft Scopes:

• Mail.Read - Read-only access to email messages in all folders of your personal mailbox
• offline_access - Maintain access when you're offline (refresh tokens for background processing)

Mail.Read is read-only, so we CANNOT:

• Send emails on your behalf (Mail.Read does not allow sending)
• Delete, modify, or move emails (Mail.Read is strictly read-only)
• Mark emails as read/unread (Mail.Read does not allow state changes)
• Create or organize folders (Mail.Read does not allow write operations)
• Access your calendar, contacts, OneDrive, or Teams (different permissions)
• Share your Outlook data with unauthorized third parties
• Access shared mailboxes (we only request personal mailbox access)
• Access other team members' personal mailboxes

5.3 Revoking Access

You may revoke Gmail or Outlook access at any time:

• Gmail: Google Account Permissions
• Outlook: Microsoft Apps & Services

Revoking access will stop invoice detection but will not delete previously extracted data unless you separately request account deletion.

6.1 Permitted Uses

You may use the Service to:

• Organize and manage your business invoices
• Compare your pricing against market benchmarks
• Identify cost-saving opportunities
• Participate in group buying programs (with separate opt-in)
• Export your invoice data for your own records

6.2 Prohibited Uses

6.3 Enforcement

If you violate these Terms, we may, in our sole discretion:

• Suspend or terminate your account immediately
• Delete your User Content
• Refuse service to you in the future
• Report you to law enforcement if illegal activity is suspected

7.1 Your Data

You retain all ownership rights to your Invoice Data and User Content. By using the Service, you grant us a limited, non-exclusive, royalty-free license to:

• Store, process, and display your data to provide the Service
• Create anonymized, aggregated benchmarks (with minimum 5 venues, no individual identification)
• Back up your data for disaster recovery

7.2 Aggregated Data

You acknowledge and agree that we may create anonymized, aggregated statistics from User Content for the following purposes:

• Provide market benchmarks to all users (e.g., "Average coffee price in Southwest WA: $28.50")
• Improve the Service and develop new features
• Publish industry reports or whitepapers

7.3 Our Intellectual Property

The Service, including all software, algorithms, design, logos, trademarks, and content (excluding User Content), is owned by MightySmall and protected by copyright, trademark, and other intellectual property laws.

You may NOT:

• Copy, modify, or create derivative works of the Service
• Use our trademarks or logos without written permission
• Remove or alter any copyright or proprietary notices

7.4 Feedback

If you provide feedback, suggestions, or ideas about the Service, you grant us a perpetual, irrevocable, royalty-free license to use, implement, and commercialize that feedback without compensation or attribution.

10.1 "AS-IS" Service

10.2 No Financial Advice

MightySmall provides information only, not financial, legal, or tax advice. Price benchmarks are provided for reference and do not constitute recommendations. You should consult with qualified professionals before making business decisions based on the Service.

10.3 Invoice Accuracy

Invoice extraction uses automated algorithms (OCR, keyword detection) and may contain errors. You are responsible for:

• Verifying extracted data against original invoices
• Correcting any inaccuracies
• Not relying solely on extracted data for tax or accounting purposes

10.4 Read-Only Email Access

MightySmall uses read-only OAuth scopes (gmail.readonly for Gmail andMail.Read for Outlook). We do not move, label, mark as read, or otherwise modify your emails. The scopes do not permit it. The Service is purely read-and-extract: we read message metadata, download PDF attachments, and parse those PDFs.

10.5 Shared and Delegated Mailbox Access

Different providers handle shared mailbox access differently, and our scopes reflect that:

• Outlook (Mail.Read) - We access only YOUR personal Outlook mailbox. We do not request Mail.Read.Shared, so we cannot read shared mailboxes (e.g., [email protected]) even if you have delegate access to them in Outlook.
• Gmail (gmail.readonly) - Google's gmail.readonly scope automatically includes any delegated Gmail account or Google Group inbox you have already been granted access to. Google does not provide a way to separate "personal only" from "delegated" access on this scope.

For any mailbox we can access via your connected account:

• Authorization - You represent that you have proper authorization to connect that account (and any mailboxes Google has delegated to it) to MightySmall.
• Team member privacy - Other users with access to a shared mailbox will not see your MightySmall data. Because our access is read-only, they will not see any changes either. We cannot move, label, or modify emails.
• Access revocation - If your admin revokes your underlying access to a delegated mailbox or Google Group, our access ends automatically (Google enforces this at the API level).
• No liability for unauthorized access - We are not responsible if you connect an account that has access to mailboxes you are not authorized to use.

11.1 Maximum Liability

11.2 Exclusion of Certain Damages

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR:

• Indirect damages: Lost profits, lost revenue, lost business opportunities
• Consequential damages: Costs of procurement of substitute services
• Incidental damages: Data loss, service interruptions
• Punitive damages: Damages intended to punish or deter

11.3 Exceptions

Nothing in these Terms excludes or limits our liability for:

• Death or personal injury caused by our negligence
• Fraud or fraudulent misrepresentation
• Gross negligence or willful misconduct
• Any liability that cannot be excluded under applicable law

11.4 Australian Consumer Law

14.1 Governing Law

These Terms are governed by the laws of Australia (specifically, the laws of [Your State, e.g., Western Australia]), without regard to conflict of law principles.

14.2 Jurisdiction

You agree that any disputes arising out of or related to these Terms or the Service shall be resolved exclusively in the courts of [Your State, Australia], and you consent to personal jurisdiction in those courts.

14.3 Informal Resolution

Before filing any formal claim, you agree to first contact us at [email protected] to attempt to resolve the dispute informally. We will attempt to resolve the dispute within 30 days.

14.5 Class Action Waiver

For questions about these Terms:

• Email: [email protected]
• Support: [email protected]
• Privacy: [email protected]
• Mail: MightySmall, [Your Business Address], Australia