Triton Accounts Automation
Privacy policy
How information is handled across the receipt archive, accounts register, and supporting automation.
1. Operator and scope
Triton Engineering operates Triton Accounts Automation for its internal receipt and accounts workflow. This policy describes the automation and its Google-connected features. Contact the administrator at masoodsyedahmed93@gmail.com for privacy or support questions.
The public information pages themselves provide app information and policy text. They do not contain a Google authorization form, collect receipt uploads, or connect to Google Drive or Sheets.
These information pages are hosted using ChatGPT Sites. Hosting and delivery providers may process technical request information, such as requested URLs and browser or network information, to deliver and protect the website.
2. Information processed
The configured automation can process:
- Messages and attachments from the designated accounts WhatsApp group, including captions, message dates, sender details, and message identifiers.
- Receipt contents, such as dates, amounts, currencies, payer and payee names, and transaction references.
- Google Drive archive information, including folder and file identifiers, filenames, and file links.
- Google Sheets register entries and message identifiers used to record results and detect duplicates.
- OAuth authorization tokens, job status, error details, execution records, and backup data needed to operate and recover the service.
Google OAuth permission scopes may provide broader access than the designated folder and spreadsheet. The configured workflow uses the Triton accounts archive and intake register; it is not a folder-scoped Google permission grant.
3. Purpose and use
Information is processed to archive receipts, extract and organize account details, preserve captions and dates, identify messages already recorded, retry failed jobs, recover available missed messages, and support administrator review.
Google user data is used for the authorized accounting functions described here. Triton does not sell Google user data, use it for advertising, or use it to train general-purpose AI models.
Use and transfer of information obtained from Google APIs must follow the Google API Services User Data Policy, including its Limited Use requirements.
4. Service providers and access
Google Drive and Google Sheets store the configured archive and register. Hostinger hosts the self-managed automation server. Cloudflare provides routing and access protection. WhatsApp and WAHA provide the source message connection.
When receipt extraction is enabled with OpenAI, the receipt content supplied to that extraction step is transmitted to OpenAI for processing. The administrator controls the AI credential and provider configuration. Information may be processed in locations outside the user’s country under the providers’ applicable arrangements.
Access to the automation and its records is administered by Triton. Human access is limited to authorized staff and service providers where needed for operation, support, security, or a legal obligation.
5. Storage, retention and deletion
Retention depends on the type of record and the configured system settings:
| Record | Current configured handling |
|---|---|
| Receipt archive and account register | Retained in Google Drive and Sheets until an authorized administrator deletes them in accordance with Triton’s recordkeeping needs. |
| Durable message/job ledger | Retained on the automation server until the administrator removes or applies a retention policy to the records. |
| n8n execution records | Configured for pruning after seven days or a 5,000-record limit. |
| Local application backups | Configured for seven days of retention. Separate hosting-provider backups follow the provider’s configured schedule and retention. |
| WAHA media cache | Configured for a 48-hour cache window. This is separate from the permanent Drive archive. |
Deletion from a live system may take additional time to reach backups through their normal retention cycle. Recordkeeping duties can affect whether particular accounting records can be deleted.
6. Access protection
The automation uses authenticated administrative access, Google OAuth authorization, and encrypted storage of n8n credential values. Its public administrative hostname is configured with Cloudflare Access. These controls do not guarantee uninterrupted operation or eliminate all security risks.
The administrator is responsible for reviewing permissions, maintaining the server, protecting credentials and backups, and removing access when it is no longer needed.
7. Revocation and requests
You can revoke the app’s Google authorization through the third-party connections settings of your Google Account. An administrator can also disconnect the Google credential in n8n. Revocation stops that authorization from being used for further Google API access; it does not automatically remove previously archived receipts, register entries, logs, or backups.
To request access to relevant records, a correction, or deletion, contact masoodsyedahmed93@gmail.com. Triton may need to verify the request and identify the records before acting.
8. Updates
The administrator should update this policy when the app’s functions, providers, permissions, or retention settings change. The published policy should reflect the configuration in use.