Privacy Policy
Last updated: 9 September 2026
Access and purpose
The gateway requests Gmail read-only access from each business mailbox owner. This permission technically permits reading messages, attachments and mailbox settings throughout that mailbox; it is not limited by Google to invoice emails. The gateway uses requested email information to assist authorized users with accounting document review, extraction, matching and related QuickBooks work. The project administrator's Google account is not automatically granted as a mailbox data source.
The gateway also processes authorized users' Telegram messages, uploaded documents and necessary QuickBooks records to answer requests and carry out approved accounting changes.
Processing and sharing
The gateway runs on Amazon Web Services. Relevant message content, attachments and accounting information may be processed by OpenAI through Codex to perform the user's requested work. Results and approval details may be delivered to the authorized user's Telegram private chat. Information may be recorded in QuickBooks Online when an accounting operation is approved. Google provides mailbox access. The operator and authorized staff may access data as necessary to operate, troubleshoot or perform the requested accounting work.
The gateway does not sell Google user data or use it for advertising. The operator does not use Google user data to train general-purpose AI models. Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Storage and access controls
Mailbox authorization tokens are stored on the operator's server and permit continued access without repeatedly entering the mailbox password. The gateway does not store the Google account password. Tokens, mailbox processes, working files and bot conversations are separated by business, with operating-system file permissions and an explicit user allowlist. Infrastructure administrators retain administrative access.
Messages and derived content may remain in assistant conversation history, temporary attachments, operational records and approved accounting entries. This deployment does not yet impose a single automatic retention period across all these stores. Backups and external service records may have separate retention. Contact the operator to request review or deletion of stored gateway data; accounting records that must be retained or records held by external services may require separate handling.
Control and revocation
You can revoke the gateway's access in your Google Account's third-party connections settings. Revocation stops subsequent authorized Gmail access but does not itself erase content already processed or recorded. Contact info@food2u.com.au to request removal of the server token, review of retained data, or assistance with access and privacy questions.
Changes
The operator will update this page when the gateway's data practices change. Additional mailbox permissions or materially different data uses require appropriate notice and authorization.