Security and privacy
Read-only by design.Yours to delete.
Gennai connects to Gmail, Outlook or any IMAP inbox with read-only access to find supplier invoices and receipts. It cannot send, delete or move a single email. Here is exactly what we access, what we keep, who can see it and how to take it back.
Permissions Gennai requests
As shown on the consent screengmail.readonlyMail.Readdrive.fileFiles.ReadWrite.AppFolderapp passwordRevoke access at any time from your Google or Microsoft account, or disconnect the inbox in Gennai.
OneDrive backups connected before July 2026 hold Microsoft's broader Files.ReadWrite permission, still used only for the Gennai folder. Reconnecting switches them to the folder-only permission.
Read-only
Gmail and Outlook access, enforced by the permission itself
CASA Tier 2
Independent security assessment, repeated every year
No AI training
Your documents never train AI models, ours or our provider's
What happens to your email
We keep invoices. Not your email.
Gennai analyzes what arrives in your inbox, keeps the invoices and receipts it finds and discards everything else once the analysis is done.
- 1
Read, never write
Emails are read with read-only access, including their attachments and the invoice links inside them. The analysis is automated: nobody at Gennai reads them.
- 2
Keep the invoice
When an email contains an invoice or a receipt, Gennai keeps the document and the data extracted from it: supplier, amounts, dates and line items.
- 3
Discard the rest
Every other email is discarded after the analysis. We keep only short technical records, so nothing is processed twice: the subject line and sender domain for up to 90 days, and a record of which emails were processed for up to 18 months.
Access, in plain words
What Gennai can and cannot do
The permissions above set hard limits. This is what they mean in practice.
Gennai can
- Read new and past emails to find invoices and receipts
- Open the attachments and invoice download links in those emails
- Save copies to Google Drive or OneDrive, only if you turn backup on
- Send invoices to Xero, QuickBooks or Holded, only once you connect them
Gennai cannot
- Send, delete, move or modify any email
- See your Google or Microsoft password
- Open files in your Google Drive or OneDrive that it did not create
- Use your invoices to train AI models
- Sell your data, or use your emails and invoices for advertising
Independent assessment
Assessed every year under CASA Tier 2.
Google requires every app with restricted access to Gmail to pass the Cloud Application Security Assessment (CASA) of the App Defense Alliance. TAC Security, an authorized lab, reviews Gennai's security controls and scans the application for vulnerabilities, and the assessment is repeated every year.
- Framework
- App Defense Alliance CASA, Tier 2 (AL1)
- Required by
- Google, for restricted Gmail permissions
- Assessed by
- TAC Security, an authorized CASA lab
- Last assessment
- October 2026 · renewed every year
- Also listed on
- Xero App Store and QuickBooks App Store
Protection
Protected at every step
The same controls apply on every plan, including the free one.
Encrypted in transit and at rest
Every connection to Gennai is encrypted, and all stored data is encrypted at rest.
Credentials locked away
Mailbox and integration credentials are encrypted with AES-256 before they are stored, and erased the moment you disconnect.
No passwords for Google or Microsoft
Gmail and Outlook connect through OAuth 2.0, so Gennai never sees your password. IMAP app passwords are stored encrypted.
Access by role
Only the people you invite see your organization's invoices, each with the role you give them. Share links you create expire automatically.
Staff access only when needed
Our team does not read your documents. We look only when you ask us to, to investigate a security issue or when the law requires it, and we delete any working copy afterwards.
Assessed every year
TAC Security, an authorized CASA lab, reviews our controls every year as part of the assessment Google requires for Gmail access.
Retention and deletion
Your data, your decision
We keep your invoices for as long as you want them and technical records only as long as we need them. Taking everything back takes a few clicks.
How long we keep it
- Invoices, documents and extracted data
- Until you delete them
- Mailbox and integration credentials
- Until you disconnect
- Record of emails already processed
- Up to 18 months
- Subject line and sender domain of emails evaluated
- Up to 90 days
- Server logs and error reports
- Up to 90 days
The complete table is in our Privacy Policy, section 14.
How to take it back
- Disconnect a mailbox
- Scanning stops at once. Credentials and scan history are deleted.
- Delete an invoice
- Remove any document from Gennai at any time.
- Download your data
- Settings, Privacy and data.
- Delete your account
- Invoices, documents, connections and team access are permanently erased.
- Cancel a paid plan
- At the end of the billing period you move to the Free plan. Nothing is deleted.
Questions about your data: privacy@gennai.io
For your vendor review
Everything a security review asks for
Running a supplier or IT assessment? These are the documents and contacts you will need.
Privacy Policy
What we process, who we share it with, how long we keep it, and our Google API Limited Use commitment.
Read the policyTerms of Service
Your agreement with Gennai, including cancellation and account deletion.
Read the termsService providers
Ask for the current list of providers that process data for Gennai, for your vendor assessment.
privacy@gennai.ioCASA assessment
Tier 2, by TAC Security. Last assessed in October 2026 and renewed every year.
See the assessmentYour data rights
Access, correct, delete or export your data. Most of it you can do yourself in Settings; requests to privacy@gennai.io are answered within 30 days.
Read section 17Report a vulnerability
Found a security issue? Email us with Security in the subject line. Our security.txt file lists the current contacts.
support@gennai.iosecurity.txtCommon questions
Security questions, answered
Is it safe to connect my Gmail to Gennai?
Gennai asks for Gmail's read-only permission (gmail.readonly), so it can read email but cannot send, delete, move or change anything. You sign in with Google, so Gennai never sees your password, and Gennai is assessed every year under CASA Tier 2, the security assessment Google requires for this level of access. You can revoke access at any time.
Can Gennai send, delete or change my emails?
No. Gmail and Outlook access is read-only, enforced by the permission Google and Microsoft grant. For IMAP inboxes, where a password cannot be limited, Gennai's software only reads.
Does Gennai store my emails?
No. Gennai keeps the invoices and receipts it finds and the data extracted from them. Every other email is discarded after the analysis. We keep only the subject line and sender domain for up to 90 days, and a record of which emails were processed for up to 18 months, so nothing is processed twice.
Are my invoices used to train AI models?
No. Documents are read by an enterprise AI service under contract terms that prohibit the provider from using your data to train or improve its models, and Gennai does not use your data to train AI models either.
Who at Gennai can see my invoices?
Nobody, as a rule. Documents are processed automatically. Our team looks at a document only when you ask us to, when it is needed to investigate a security issue, or when the law requires it, and deletes any working copy afterwards.
How do I revoke Gennai's access to my inbox?
Disconnect the inbox in Gennai: scanning stops at once, the stored credentials are deleted and, where the provider allows it, Gennai's access is revoked. You can also remove Gennai from your Google Account's third-party access page or from your Microsoft account's app permissions.
What happens to my data if I delete my account?
Deleting your account in Settings permanently erases your organization: invoices, documents, extracted data, bank data, connections and credentials, team and accountant access, and your user. Any active subscription is cancelled and Gennai's access is revoked at Google, Xero and QuickBooks. Deletion is immediate and cannot be undone; copies you saved to your own Google Drive or OneDrive stay there.
Is Gennai SOC 2 or ISO 27001 certified?
No. Gennai's independent assessment is CASA Tier 2 under the App Defense Alliance, which Google requires for apps that access Gmail. If your procurement process requires SOC 2 or ISO 27001, contact us before you sign up.
How do I report a security issue?
Email support@gennai.io with Security in the subject line, or use the contact form on our support page. Our security.txt file lists the current contacts.
Connect your inbox read-only. Disconnect in one click.
Start freeFree forever plan available · No credit card required