When you connect Gmail or Outlook, QuietBill requests the minimum needed:
- Gmail:
gmail.readonly. Read-only. We cannot send, delete, label, or modify anything. - Outlook:
Mail.Readplusoffline_access(so syncing continues without you re-authorizing each day).
We only fetch messages that look like receipts, based on subject and content keywords, rather than reading your entire mailbox indiscriminately. The matched receipts are imported; other mail is not stored.
Your refresh token is encrypted at rest. Disconnecting a mailbox from the “Add subscriptions” panel deletes the stored token and stops all future syncing immediately.
If you prefer not to connect an inbox at all, email forwarding and PDF upload give you full control over exactly which documents QuietBill sees.