Aloi Receipt Pipeline — Privacy Notice

Last updated: November 1, 2026 Aloi Receipt Pipeline is a private tool used by Aloi Plumbing’s owner to organize supplier documents and purchase records. Questions and deletion requests can be sent to admin@aloiplumbing.com.

Information accessed and purpose

With the account owner’s authorization, the app uses Gmail read-only access to find selected supplier messages and PDF attachments. It retrieves matching message information and documents to preserve source evidence, extract purchase details, identify duplicates, match invoices with delivery documents, and flag discrepancies for review. Google’s Gmail permission covers the authorized mailbox. Supplier filters are application rules and do not restrict the underlying Google permission to those suppliers. The app does not send, edit or delete email.

Storage and processing

Selected PDFs, source identifiers, sender and receipt information, document hashes, extracted purchase details and processing evidence are stored in Supabase. Approved purchase information can be reflected in Aloi Plumbing’s taskboard and supplier cost history in Google Sheets. Nightly importing is not currently enabled. Google provides Gmail and Sheets; Supabase provides backend processing and storage; ChatGPT Sites hosts the private connection interface. Authorized project administrators and service functions can access information needed to operate these services. Separately authorized troubleshooting or document review may involve ChatGPT/Codex and human review of specific records. The automatic PDF parser uses PDF.js and application code.

Retention and deletion

Imported receipts, cost records and processing evidence are retained for reconciliation and duplicate prevention, with no automatic deletion schedule. Requests for deletion or information about retained records can be sent to admin@aloiplumbing.com. Revoking Google authorization stops future authorized access but does not delete previously stored documents or purchase records. Backup handling and applicable business-record retention must be assessed when responding to a request; no fixed deletion deadline is promised.

Access and data use

The system uses restricted access and private credential storage. These safeguards reduce risk but cannot guarantee that unauthorized access will never occur. Google data is used for the receipt-processing functions described here. Google’s API Services User Data Policy, including its Limited Use requirements, governs that use. This notice does not represent Google verification or certification. Material changes to data use will be disclosed before the new use begins, with additional consent where required.