Penny AI use and limitations

What Penny does

When a user asks a question, Penny may retrieve the user's visible invoices, clients, expenses, categories or reports through the same tenant-scoped API controls used by the application. It can summarize records and propose supported actions. Write actions require explicit user confirmation and are audited as assistant activity.

What Penny does not do

• It does not independently send invoices, record payments, create records or change data without confirmation.
• It cannot delete records, change company settings, manage users, or access another organization.
• It does not make credit, employment, eligibility, insurance, housing or other legal or similarly significant decisions.
• It does not replace professional review of tax, accounting, legal, VAT, e-invoicing or financial obligations.

Data sent to the AI provider

Penny sends the prompt and the minimum relevant context returned by the user's authorized tools to the configured provider. This may include names, email addresses, invoice amounts, dates, notes and expense details. Do not include special-category data, secrets, payment-card data or unnecessary personal information. Provider retention, training, region and transfer terms must be reviewed in the subprocessor register and customer DPA.

Human review and corrections

Review every answer and proposed action against the source record before relying on it. If an answer is wrong, correct the underlying record through the normal application workflow. Penny history is stored in the browser for up to 24 hours and is cleared on sign-out or expiry.

Enablement and rights

Penny is an optional feature and may be disabled by the customer. Customers must provide any notice required to their users and data subjects before sending their data to an AI provider. Questions or requests: privacy@epickod.org.