Read the invoices. Leave the inbox alone.
The AP collection workflow reads financial documents. We do not need to move or delete your messages to prepare your bills. We confirm the connection permissions with you during setup.
Unrelated email stays unrelated
Receiptor AI looks for financial documents. Unrelated email content is not stored. Our Google data handling follows the Google API Services User Data Policy, including Limited Use requirements.
Keep the evidence and the control
The original invoice stays attached to the accounting record. Your finance team reviews and releases payments in its existing process. Penrose does not release your payment run.
Mailbox access and permissions
The collection workflow is read-only in purpose: finding and reading financial documents. Optional mailbox actions on the underlying platform can require additional permissions. We confirm your enabled settings and provider permissions during setup rather than describe every possible connection as read-only.
You choose which inboxes to connect. You can disconnect a source through the underlying Receiptor AI settings. Ask the team about removal or retention of records already processed.
Google API Limited Use
Receiptor AI’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Mailbox access supports the financial-document workflow; it is not an invitation to store unrelated email.
A past assessment, described accurately
Receiptor AI previously completed a CASA Tier 2 assessment through the App Defense Alliance. Security assessments are point-in-time reviews. We do not present an expired assessment as a current certification, or describe Penrose as separately certified.
Contact us for current review materials, or read about the framework on the CASA developer site.
Human review and payment release
Penrose’s service team reviews invoice exceptions within your agreed scope. If a question needs your business knowledge, we ask you. A site-allocation answer is context for invoice preparation, not authorisation to change bank details or release funds.
Your finance team releases payments in its existing process. Keep your supplier bank-detail verification and payment controls in place.
Your choices on this website
CookieYes manages your preferences. Optional PostHog analytics and browser error reporting run only after you allow analytics. We measure campaign source, medium, campaign name, referring domain, and landing page to understand walkthrough bookings. You can decline or withdraw consent using Cookie settings in the footer. We do not use session recording. Booking works without analytics permission.
The booking calendar loads from Calendly when you choose to load it. Calendly provides its own privacy information and cookie controls for the details you enter there.
With analytics permission, the calendar link also includes the three campaign labels so the booking can be attributed in Calendly. We do not send invitee details to PostHog. Sentry reports technical server errors with request credentials, form data, and URL query strings removed.
Ask us about your requirements
Tell us about your access policies, review requirements, and record-retention needs before setup. We will confirm what is supported in your service proposal.
Penrose and Receiptor AI are operated by Merlino, Inc. Read our Privacy Policy, Terms, and Cookie Policy.