Privacy policy

This policy explains how Jacob Doria, operating Livro Accounts Payable (“Livro,” “we,” or “us”), handles information when you use Livro.

Effective September 15, 2026. Contact: livro.support@gmail.com.

Information we process

• Account and workspace information: your name, email address, business membership, permissions, settings, and sign-in/session information.
• Invoices and documents: uploaded files, invoice fields, vendor details, amounts, dates, categories, locations, review history, and export records.
• Connected Gmail information: authorized mailbox identity, relevant messages, sender/recipient details, subjects, message bodies, threads, and supported attachments used for invoice capture and correspondence.
• QuickBooks information: authorized company identifiers, company and currency settings, vendors, expense accounts, and the Bill details and identifiers needed for user-requested exports.
• Bank information, if connected: account identifiers, account details, balances and transaction information made available through Plaid. Connections and coverage vary.
• Operational information: OAuth credentials for authorized connections, service request identifiers, status/error codes, security and hosting logs, and support correspondence.

Why we use information

We use this information to authenticate users, separate business workspaces, capture and organize invoices, prepare draft replies, perform requested accounting exports, show available cash activity, maintain recovery copies, troubleshoot problems, secure the service, and respond to support or privacy requests.

AI processing and human review

Livro sends relevant invoice documents and email content to the OpenAI API to extract invoice details and prepare draft correspondence. Requests disable API response storage using the store:false setting; this does not mean the provider has no operational or safety retention. Users must review the output. Livro does not autonomously approve invoices, send email replies, or initiate payments.

We do not use connected Gmail or QuickBooks data to train general-purpose AI models. We do not retain Google Workspace data to develop, improve, or train non-personalized AI or machine-learning models.

Google API Limited Use

Livro’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements.

Google data is used only for the disclosed, user-facing invoice and correspondence features. We do not sell it, use it for advertising, or transfer it for unrelated purposes. Human access is limited to your authorized workspace users and, where permitted, support with your consent, security investigations, or legal obligations.

Service providers and sharing

Livro uses Render for application hosting, Supabase for authentication, database and private document storage, and Cloudflare for domain/DNS services. OpenAI processes the content described above. Google, Intuit and Plaid provide integrations you choose to connect. Providers receive information necessary for their roles and may process it in the United States or other locations under their applicable terms and privacy practices. We may also disclose information when legally required or necessary to address fraud, abuse or security incidents.

Business administrators control membership and access within their workspace. We do not sell personal information or use invoice or connected-account data for targeted advertising. We do not share one business’s accounting data with unrelated customer workspaces.

Storage, security and retention

We use HTTPS, private document storage, business access checks, and encrypted storage for integration credentials and runtime data. No system can guarantee absolute security. Keep your credentials private and grant workspace access carefully.

Working invoices and associated records are retained while needed to provide your workspace, unless an authorized deletion request is fulfilled or retention is required by law. The configured recovery process retains the newest seven successful daily snapshots; older copies are replaced after a new snapshot is verified. This is not a guarantee that all backup data expires within seven calendar days. Provider logs and backups may have separate retention periods.

Your choices and requests

You may disconnect integrations in Livro Settings and revoke access in the provider’s own account controls. Disconnecting stops future authorized access but does not automatically delete imported records, backups, or Bills already exported to QuickBooks.

Contact livro.support@gmail.com to request access, correction, export, or deletion of your data or workspace, or to ask a privacy question. We verify identity and business authority before acting. Some information may be retained for legal obligations, security, or dispute resolution; recovery copies are removed through the backup lifecycle. We will explain applicable limits when responding. Do not email passwords, access tokens, or API secrets.

Cookies, children and changes

Livro uses essential session cookies and browser storage for authentication, security and interface preferences. The service is intended for adult business users and is not directed to children under 13. Material changes to this policy will be communicated through the service or appropriate contact channels, with the effective date updated here.