APPLICATION INFORMATION
Privacy policy
This policy describes how Fidus handles information through its private-use invoice application. Contact: info@fiduswork.com.
Information accessed
With the account holder’s Google OAuth authorization, the application retrieves selected Gmail messages and invoice attachments according to operator-configured filters. Data can include account email address, message identifiers, sender, subject, timestamps, labels, message content and PDF or image attachments. Invoices may contain business names, addresses, contact details, invoice dates and numbers, descriptions, quantities, prices, tax and totals.
Processing records include originals, extracted information, AI replies, validation and review results, identifiers, timing, usage and cost. Credentials are used to authenticate connected services and are not collected through this website.
Purpose and recipients
Data is used for invoice extraction, validation, duplicate checks, preparation of accounting drafts, review, troubleshooting and recovery. Google provides authorized Gmail data. Invoice images and extraction instructions are sent to Cursor Cloud Agents using the selected Grok model. Processing therefore includes cloud services. Relevant invoice data and original documents are transferred to Xero when that integration is authorized and enabled; Xero setup is currently pending.
Authorized operators and support tools may inspect specific records when the account holder authorizes review or troubleshooting. Fidus does not sell Google user data, use it for advertising or creditworthiness decisions, or use it to train general-purpose AI models. Processor-side storage follows applicable service settings and terms; no zero-retention guarantee is made here. Processing may occur outside your country. See Cursor data use and Xero privacy.
Storage and retention
Documents and processing records are retained in persistent operator-controlled application storage for reconciliation, recovery and review. Saved n8n credentials use its encrypted credential store; this policy does not claim separate encryption of all stored invoice files.
There is currently no automatic deletion schedule during the pilot. The operator reviews retention after the trial and arranges deletion of records no longer needed. Backups and processor records require separate handling. Accounting records may need to be retained to meet applicable obligations. Revoking access does not erase previously stored data.
Control, corrections and deletion
Revoke access through Google Account connections and Xero connected-app settings, or ask the operator to pause processing. For access, correction, export or deletion requests, contact info@fiduswork.com. The operator will verify your authority and identify relevant local, backup and processor records. Do not send passwords, API keys or tokens. No fixed deletion turnaround is promised.
Google API data
Fidus Automation’s use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including Limited Use requirements. Transfers are limited to the disclosed invoice-processing feature and the account holder’s authorization. This is not a claim of Google verification or endorsement.
Website and policy changes
This public information website has no registration, document uploads, application analytics scripts or advertising trackers. Its host may process standard request metadata to deliver and secure the pages. Material changes to data use will be disclosed before the changed processing begins, with additional consent where required.