{
  "title": "HisabWala Receipts connector data notice",
  "updated": "2026-10-10",
  "operator": "AI Gaur LLC",
  "contact": "us@aigaur.com",
  "scope": "Hosted HisabWala MCP connector; separate from the Android app and host AI platform.",
  "inputs": "Business display name, item descriptions, quantities, prices, currency, discount, user-supplied tax and confirmation flags. Do not submit customer identities, phone numbers, banking/card details or confidential healthcare information. Photos remain with the host platform; this service accepts structured text only.",
  "purpose": "Calculate itemized totals and produce user-confirmed documents. No advertising profiles, model training, transactions or sale of document data by this connector.",
  "retention": "Calculations are transient. Generated PDF/PNG bytes are held in application RAM for up to 600 seconds, removed by a one-second cleanup task and unavailable at expiry. Restart also removes all downloads. No application database or document filesystem storage. Host-level operational records are outside this application retention statement.",
  "sharing": "Anyone with a generated secret URL can download that document before expiry. Links are deliberately shareable bearer links, not account-authenticated. Downloaded copies and AI-platform conversation history remain subject to their own controls. Obtain consent before generation.",
  "deletion": "The delete_receipt_downloads tool revokes both temporary links immediately. It cannot remove downloaded or shared copies, platform chat history or infrastructure records. For questions contact us@aigaur.com.",
  "processing": "Hostinger VPS in Mumbai, India. Sole administrator accesses from the United States. Host AI providers process conversations according to their own policies. No additional model provider is called by this backend.",
  "controls": "TLS in transit, random 256-bit bearer tokens, no-store download headers, request-size and rate limits, non-root read-only container, application and reverse-proxy access logging disabled. No claim of encryption at rest or external certification.",
  "limitations": "Users must review extracted data and tax inputs. A receipt reflects the issuer confirmation of payment, not independent verification or a compliant fiscal invoice guarantee."
}
