What the application does
The application uses the Gmail API to find messages from specifically approved suppliers, inspect message metadata and authentication results, and retrieve invoice PDF attachments for controlled invoice processing. The currently approved suppliers are MPD and HTC. Sources that do not match the configured sender and authentication checks are rejected.
The application requests Google's gmail.modify permission. The deployed Gmail client currently lists and retrieves messages and attachments only; it does not change message contents, read status or labels, and it does not send email.
Gmail label changes may be introduced later to support processing status. They will not be activated unless the application and privacy policy are updated to describe the exact behaviour first.
How information is protected
OAuth credentials are protected on the Moore's Automation Windows service host. Invoice evidence is held in access-controlled local storage and, when processing is enabled and validated, in the private Moore's CVR archive and invoice database. The application is not used for advertising, profiling or the sale of personal information.
Access to this private application is by permission only. For a privacy question or information request, email moorescvr@gmail.com.