Smart Management · last updated 11 September 2026
Smart Management is self-hosted software. It runs on a server controlled by the person who installed it, and that person is the only user. There is no hosted service operated by anyone else, and no account is created with any third party.
With the user's explicit consent through Google's standard sign-in screen, the app requests one permission:
https://www.googleapis.com/auth/gmail.readonly — read-only access to Gmail.It uses this to locate the property statements sent by the managing agent, read those messages, and retrieve the statement documents they link to. It reads no other category of mail for any other purpose.
The app cannot send, delete, modify, move or label mail, because it never requests the permissions that would allow it to. It does not ask for or store a Google password.
Onto the user's own server, and nowhere else. Message content and statement documents are stored in a database and a file directory on that machine.
The only external services contacted are Google's own APIs, to authenticate and to read the mailbox, and a public exchange-rate source used to display amounts in a second currency. No personal data is sent to the rate source.
The OAuth tokens Google issues are encrypted before being written to disk. The refresh token never leaves the server process and is never sent to a browser. Sign-in sessions use short-lived tokens that are rotated, and reuse of an old one invalidates the whole session family.
For as long as the user keeps it. Disconnecting Gmail inside the app deletes the stored tokens immediately and revokes them with Google. Deleting the installation, its database and its document directory removes everything the app has ever stored.
Access can be withdrawn at any time, either from within the app or from Google Account permissions. Withdrawal takes effect immediately; the app then has no access to the mailbox at all.
Smart Management's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The software is not directed at children and collects nothing from them.
If this policy changes, the date at the top of this page changes with it. Questions about it can be sent to the contact address listed on the Google consent screen for this application.