Publisher: J Graham Plumbing. Contact: jgraham_plumbing@hotmail.com.
The Android app keeps purchase orders, uploaded original files, email source text, job addresses, invoice summaries and work notes on your phone. Connected records and sign-in tokens are encrypted in app-private storage. The separate manual ledger uses Android app-private storage. Exported JSON backups contain source text and tracking records but exclude original PDF/photo/text files and sign-in credentials. Keep backups private and retain original files separately. Uninstalling the app removes its local records.
Microsoft email access is read-only. Matching sender emails, manual uploads and extracted PDF/text content are reviewed locally. Photos and scans need visual confirmation; no cloud OCR is used. Xero access reads customer, accounting and invoice information and creates customer invoices as drafts when you submit a claim. You review and issue invoices in Xero. ServiceM8 receives jobs only after you approve the PO and site address. Confirmed address corrections also update the linked ServiceM8 job.
This owner-pilot website provides the Android app-link verification file, sign-in return fallback and privacy information. It has no provider API proxy, token database or PO storage. The Android app connects directly to Microsoft, Xero and, for this pilot, ServiceM8 using an API key stored encrypted on the phone. ServiceM8 receives only the PO reference, actual job site, mapped client and a reviewed operational summary without prices; original priced documents are never uploaded there.
Cloudflare hosts this website. Microsoft, Xero and ServiceM8 process requests under their own terms, and hosting locations may be outside Australia. Deleting phone records does not delete provider jobs or invoices. Revoke app access in each provider to terminate authorisation.
The app includes no advertising or analytics SDK. Provider and hosting platforms may keep their own operational records. Contact the publisher for access/deletion requests or to report a privacy issue. Do not send passwords, API keys or full PO backups in support requests.