Privacy Policy
Effective date: August 24, 2026
1. Overview
2. Information We Collect
2.1 Account Information
When you sign up we collect your name, email address, and authentication credentials managed by our identity provider (Clerk). We do not store raw passwords.
2.2 Invoice and Financial Data
You upload invoice documents (PDFs and images) for processing. We extract and store structured data from those documents including vendor names, invoice numbers, dates, line items, and totals. This data is associated with your account and used solely to provide the Service.
2.3 Google Account and Google User Data
If you connect Gmail, we receive your Google account email address and basic profile information and use Gmail read-only access to retrieve the messages and attachments needed to identify and import accounts-payable documents. Depending on the features you authorize, this may include message and thread identifiers, sender and recipient addresses, subjects, dates, headers, labels, message bodies, attachment metadata, and attachment content. If you connect Google Drive, we receive identifiers, names, MIME types, revisions, and supported file content from the dedicated folder or files you authorize for intake. We do not receive or store your Google password.
2.4 QuickBooks Connection Data
If you connect your QuickBooks account, we store OAuth tokens and your QuickBooks realm ID to enable posting approved invoices on your behalf. We do not store your QuickBooks password. You may disconnect at any time from within the Service.
2.5 Usage Data
We automatically collect standard log data including IP addresses, browser type, pages visited, and timestamps. This helps us diagnose issues and improve the Service.
2.6 Text Intake and Mobile Messaging Data
If you link a mobile phone number for text intake, send APStack an SMS/MMS message, or choose to receive text workflow updates, we collect your mobile phone number, message metadata, message contents, attachments you send, consent status, and related delivery or support information. We use this information to provide text intake, account notifications, AP workflow updates, and help or opt-out handling.
3. How We Use Your Information
- Extract, validate, and present invoice data for your review
- Post approved invoices to your connected QuickBooks account
- Detect duplicate invoices and flag low-confidence extractions
- Provide customer support and respond to your inquiries
- Send transactional emails related to your account activity
- Send transactional SMS/MMS messages when you opt in to text intake or workflow updates
- Improve the Service using operational telemetry, user feedback, and data that is not Google User Data
- Comply with applicable legal obligations
We do not sell your personal information or financial data to third parties, and we do not use your invoice data for advertising purposes.
4. Google User Data
4.1 How We Use Google User Data
We use Google User Data only to provide and improve the user-facing features you request: connecting the authorized Gmail inbox or Google Drive source, identifying AP-related messages and files, importing supported documents into your workspace, extracting invoice information for your review, preventing duplicates, and showing source evidence and connection status. Google User Data is not used for advertising, credit or lending decisions, or to build user profiles unrelated to these features.
4.2 AI and Model Training
APStack does not use Google User Data, including raw, aggregated, anonymized, or derived Google Workspace API data, to develop, improve, or train generalized or non-personalized AI or machine-learning models. Contracted AI processors may process the minimum content necessary to provide the extraction and workflow feature you request, and they are contractually prohibited from using that content to train their generalized models.
4.3 How We Store and Protect Google User Data
APStack stores OAuth credentials in encrypted, access-controlled systems. Message content may be processed temporarily to determine whether it contains AP work. When an AP document is imported, APStack may retain the selected message content, attachment, source evidence, and derived accounting fields in private workspace storage so you can review, audit, and complete the workflow. Access is limited to authorized systems and personnel, encrypted in transit, and protected at rest.
4.4 When We Share Google User Data
We transfer Google User Data only to service providers acting on our behalf when necessary to provide the feature you requested, such as secure hosting, storage, and invoice extraction. We may also disclose data when required by law or necessary to protect APStack, our users, or the public. We do not sell Google User Data, share it for advertising, provide it to data brokers, or allow service providers to use it for their own purposes. Human access is limited to cases where you consent for support, access is required for security or abuse investigation, or disclosure is required by law.
4.5 Disconnecting, Revoking Access, and Deleting Data
Disconnecting Gmail or Google Drive in APStack removes APStack’s stored OAuth credentials and stops future access. It does not automatically delete AP documents already imported into your workspace. You may also revoke APStack’s access at any time from your Google Account at myaccount.google.com/permissions. To delete imported documents, use the deletion controls in APStack or contact us at info@apstack.ai. Those records are then handled under the retention timeframes below.
APStack’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can review the Google API Services User Data Policy.
5. Third-Party Services
6. Data Retention
7. Security
8. Your Rights
9. Mobile Messaging Privacy
APStack does not sell, rent, or share mobile phone numbers, SMS opt-in data, or SMS consent information with third parties or affiliates for marketing or promotional purposes.
We may share mobile messaging information with service providers only as needed to deliver APStack messages, operate the Service, comply with law, or protect APStack and its users.
10. Children's Privacy
11. Changes to This Policy
12. Contact Us
APSTACK.AI LLC
9188 Bryden Court
Wellington, FL 33414