Security

Authentication is handled by this app’s account service (Google, X, or email).

Every invoice query is scoped to the signed-in user on the server.

AI extraction runs server-side. The browser never receives the model key.

Inbound email attachments are processed only for the matching account alias. Unknown aliases are discarded.