Privacy policy | HISAB KITAB WORKS

Gmail is optional and read-only. Invoice information can be saved in your business database and its configured cloud backups. Disconnecting stops the connection; deleting existing records is a separate step.

Who this notice covers

This notice explains how HISAB KITAB WORKS handles information in its Windows bookkeeping application, optional Gmail invoice connection, related invoice and backup services, and this information website. The developer’s support and privacy contact is paulcamerasystems@gmail.com.

The business using HISAB KITAB controls its store records and which staff may use them. If you are an employee or supplier, your business administrator can help with access to records held by that business.

Information the application handles

Store and bookkeeping records: store identifiers, user and employee information entered into the app, shift and batch details, cash drops, payouts, purchase invoices, supplier details, product lines, quantities, prices, and related notes.
Connection information: the connected Gmail address, authorization tokens, import settings, and processing identifiers used to avoid duplicate imports.
Service information: license and device identifiers, store/database identifiers, request and error information, and backup metadata used to operate and troubleshoot configured services.
Support information: information you choose to send when requesting help. Please do not email passwords or Google verification codes.

Gmail access and purpose

Gmail connection is optional. When you choose Connect Gmail, Google asks you to authorize https://www.googleapis.com/auth/gmail.readonly. This permission can read your email messages and settings. It is broader than access to invoices alone.

The app uses this access to search for messages with PDF attachments within relevant date ranges, retrieve matching email messages, extract supported invoice PDFs, and create purchase and product-cost records. Matching messages can contain information unrelated to invoices; the app retrieves the message to process its attachments. Sender, subject, and message date may be used in import records or notes.

The app also reads the connected mailbox address to identify the account. The Gmail integration does not request permission to send messages, modify messages or labels, or delete email. You enter your Google password on Google’s sign-in page, not into HISAB KITAB’s Gmail connection.

How information is used

Information supports the features you use: bookkeeping, invoice parsing, duplicate detection, review of uncertain invoices, product-cost history and price-change alerts, store-specific records, configured backups, licensing, and troubleshooting.

Gmail-derived information is used for these user-facing invoice and bookkeeping functions and their operation. It is not used for advertising, sold to data brokers, used for creditworthiness decisions, or used to train general-purpose AI models. The application’s scanned-invoice OCR runs locally on the Windows computer.

HISAB KITAB WORKS’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Storage, providers, and sharing

On the Windows computer: Gmail authorization tokens are stored using Windows data protection. Downloaded invoice PDFs and review files are stored in the application’s local data folders. Parsed invoice information and other bookkeeping entries are stored in the configured business database.

Cloud backups: when the database-backup service is configured, database copies are uploaded to Cloudflare-backed storage. These copies can contain Gmail-derived invoice details and notes. Gmail-connected bookkeeping is therefore not exclusively device-local.

Separate invoice inbox: if you use a store invoice address or email forwarding, the invoice inbox service processes the forwarded email and stores invoice metadata and PDF attachments with Cloudflare services. This is separate from directly connecting Gmail.

Providers and authorized people: Google provides Gmail authorization and retrieval. Cloudflare provides configured invoice and backup infrastructure. This website uses OpenAI Sites hosting and its delivery infrastructure. Authorized business users can access records according to their application access; provider administrators may have technical access necessary to operate these services. Support review of your invoice content should be limited to the information you authorize us to review for your request.

Information may be disclosed when required by applicable law. Google-derived information is subject to Google’s Limited Use requirements, including restrictions on transfers and human access. It is not shared for unrelated marketing purposes.

Retention and deletion

Imported bookkeeping records and local invoice files remain until they are removed through the applicable business records process or with support assistance. Disconnecting Gmail does not delete existing purchases, product-cost records, downloaded PDFs, or backups.

Backup retention depends on the configured service and backup rotation. An older copy can remain after a record is changed or deleted in the active database. There is no single automatic deletion period for all copies, and this notice does not promise immediate removal from every backup.

To request access, correction, or deletion of information held by the developer’s services, email paulcamerasystems@gmail.com with your business/store name, connected email address if relevant, and the request. We may need to verify your authority and coordinate with the business administrator. We will explain any applicable record-retention requirements or technical limitations when handling the request. Do not include passwords, tokens, or complete financial records in the initial request.

Disconnecting and your choices

Use Disconnect Gmail in the desktop app to remove its locally stored token. The app also attempts to revoke the token with Google.
You can independently review and remove access in your Google Account’s third-party connections.
If you enabled Gmail forwarding separately, turn off that forwarding rule in Gmail as well; disconnecting the API connection does not remove forwarding.
Request deletion of previously imported or hosted information separately, as described above.

You can use manual invoice import without connecting Gmail. Only connect a mailbox you are authorized to use for the selected business.

Security and website information

The application uses Windows data protection for stored OAuth tokens, and hosted service connections use HTTPS. Access to bookkeeping information also depends on the security of your Windows accounts, database, backups, and authorized application users. No system can guarantee absolute security.

These information pages contain no invoice upload form, advertising pixels, or custom analytics scripts. Hosting providers may process technical request data such as IP address, browser information, and access logs to deliver and protect the website. The website does not ask you to connect Gmail; that connection begins in the desktop application.

Updates and contact

Effective date: October 23, 2026. Changes to this notice will be reflected on this page. New uses of Google data that require additional consent must be disclosed before that use begins.

For questions about this notice or a privacy request, contact paulcamerasystems@gmail.com. HISAB KITAB WORKS is intended for business bookkeeping, not for children’s use.