Effective 2026. Operated by Stone Solutions ("we", "us").
Invoice Automation is a private business tool that automates Accounts Payable for a single client organization. It reads invoice emails, organizes invoice documents, and records bills in the client's accounting system. This policy describes the data it accesses and how that data is handled.
Accessed data is used solely to provide the Accounts Payable automation service to the client. Invoice documents are analyzed to extract fields (vendor, amount, dates, billing address) needed to record a bill and assign it to the correct store location. We do not use client data for advertising and we do not sell client data.
Invoice PDFs and processing records are retained in the client's Google Drive and the application's datastore for as long as the service is active or as required for the client's recordkeeping. Access tokens are stored encrypted in Google Secret Manager and can be revoked at any time by disconnecting the application.
Access is authenticated via OAuth 2.0. Tokens are stored in Google Secret Manager. The management dashboard is restricted to an explicit allowlist of authorized email addresses. Data remains within the operator's Google Cloud project and the client's Google Workspace and QuickBooks accounts.
The client may disconnect the application from QuickBooks or revoke Google access at any time, which stops further processing. To request deletion of stored data, contact us.
Questions about this policy: tanner@stonesolutions.io.