StanSpark Personal Invoice Intake — Privacy Notice Updated: 23 October 2026 Operator and contact: Kelvyn, kelvyn@stanspark.com. Purpose and access This privately operated connector helps Kelvyn reconcile StanSpark expenses from aikingyouknow@gmail.com. Google Gmail read-only permission technically permits reading all messages and settings. The scheduled application searches for invoice and receipt candidates. It cannot send, change, or delete Gmail messages. The connector accepts only the specifically configured mailbox. Data processed and stored The application reads matching messages and attachments to identify invoice information and possible duplicates. The private finance system may retain invoice/receipt subjects, sender, dates, identifiers, stated amounts and currencies, source links, attachment files and hashes, and review decisions. Full message body text is processed for extraction and hashed; the scanner does not archive full raw message bodies. Initial connection checks cover 90 days; subsequent daily checks overlap prior results to catch delayed mail. Infrastructure and use Google provides the Gmail API. Credentials and intake records are stored with restricted filesystem permissions on the existing StanSpark Hetzner finance server. The self-hosted Baserow dashboard is protected by Cloudflare access controls. Access is limited by the existing finance-system permissions. This notice is public; mailbox contents, credentials, and finance records are not published with it. The scanner does not execute instructions or follow arbitrary links found in messages. It does not use Gmail data for advertising, sale, or training general-purpose AI models. Its automated extraction is deterministic. Imported evidence requires review and does not itself approve an expense, establish business purpose, prove payment, or create a bank-ledger transaction. Retention and control Invoice evidence remains in the private finance archive until Kelvyn authorizes an appropriate retention or deletion action. There is no automatic invoice purge. Contact Kelvyn at the address above about access, correction, or deletion; accounting record-retention obligations may affect deletion. Access can be revoked from the Google Account third-party connections page. Revoking Google access stops future reads; it does not remove previously retained finance evidence. Google data use Use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.