Privacy Policy

Last updated: February 13, 2026

AutoInv ("we", "our", "the add-on") is a Google Workspace Add-on that extracts structured data from invoice text. This policy explains what data we access, how we use it, and your rights.

1. What Data We Access

AutoInv requests the following Google OAuth scopes:

• Google Sheets (read/write) — to read invoice text from cells and write extracted data back to your spreadsheet.
• Gmail (read and modify) — to read unread emails with a label you specify, extract invoice data from them, and mark them as read after processing. We never send, delete, or forward emails.
• User email address — to verify your license status with the Google Workspace Marketplace.

2. How We Process Your Data

When you extract invoice data (manually or via Gmail import), the text content of the invoice is sent to the Groq API (a third-party AI inference service) for processing. The Groq API analyzes the text and returns structured fields (invoice number, date, vendor, amount, due date).

• We send only the invoice text — no email metadata, no attachments, no personal information beyond what is in the invoice itself.
• Groq's privacy policy is available at https://groq.com/privacy-policy/.

3. What We Store

• API key: Your Groq API key is stored in Google Apps Script's ScriptProperties and in a hidden sheet within your spreadsheet. It never leaves Google's infrastructure except when making API calls to Groq.
• Processed message IDs: Gmail message IDs of successfully processed emails are stored in a hidden sheet within your spreadsheet to prevent duplicate imports. These are automatically deleted after 30 days.
• Settings: Your Gmail label preference and auto-import toggle are stored in your spreadsheet and in ScriptProperties.

We do not store any data on external servers. All data stays within your Google account (your spreadsheet and Apps Script properties).

4. What We Do Not Do

• We do not sell, share, or rent your data to third parties.
• We do not store invoice content after extraction is complete.
• We do not access emails outside the label you configure.
• We do not delete or send emails on your behalf.
• We do not use your data for advertising or analytics.
• We do not collect usage telemetry or tracking data.

5. Third-Party Services

AutoInv uses the following third-party service:

• Groq API (groq.com) — for AI-powered text extraction. Invoice text is sent to Groq's servers for processing. Groq processes the data according to their own privacy policy.

6. Data Security

• All communication with the Groq API uses HTTPS encryption.
• Your API key is stored server-side and is never exposed to the client-side sidebar interface.
• The add-on's network access is restricted via a URL whitelist in the manifest (only api.groq.com and appsmarket.googleapis.com).

7. Your Rights

• You can revoke access at any time by uninstalling the add-on from Google Sheets (Extensions > Add-ons > Manage add-ons).
• You can delete stored data by removing the hidden sheets (_config, _processed_ids) from your spreadsheet.
• You can revoke OAuth permissions at https://myaccount.google.com/permissions.

8. Children's Privacy

AutoInv is not directed at children under 13 and we do not knowingly collect data from children.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

10. Contact

If you have questions about this privacy policy or your data, contact us at:

Email: guillermollopis@protforge.com