version: 1
last_updated: 2026-04-09

integrations:
  - provider: google
    capability: gmail-import
    optional: true
    documentation_url: https://developers.google.com/gmail/api/guides/auth/scopes
    permissions:
      - gmail.readonly
    data_categories:
      - selected mailbox message metadata and content needed for receipt evidence import
      - receipt attachments or message-source artifacts chosen by user actions in the app
      - derived preview snapshot and reference metadata for imported records
    storage_destinations:
      - local-browser-storage
      - user-controlled-third-party-storage-when-sync-enabled
    user_controls:
      - disconnect integration in app
      - revoke provider consent in Google account settings
      - clear browser site data to remove local records
    retention_deletion_notes:
      - local records persist until user deletes records or clears site data
      - provider-side records are governed by provider account settings and policies

  - provider: google
    capability: drive-appdata-sync
    optional: true
    documentation_url: https://developers.google.com/drive/api/guides/appdata
    permissions:
      - drive.appdata
    data_categories:
      - app records selected for backup/sync
      - sync metadata
    storage_destinations:
      - local-browser-storage
      - google-drive-appdatafolder
    user_controls:
      - disconnect integration in app
      - revoke provider consent in Google account settings
      - remove app data within provider account tooling
    retention_deletion_notes:
      - local records persist until user deletes records or clears site data
      - synced records persist in provider app-data area until removed by user/provider policies