Verza Retail — Internal Retail Management Application

About this application (purpose): Verza Retail is a private, internal back-office web application built for the owner and staff of Verza Retail to manage retail operations end-to-end. It is not a public-facing consumer product; it has no signup form and is not used by the general public. The application provides:

• Order tracking — sync incoming orders from the Mengantar marketplace API and track delivery status (active, RTS, problem orders, delivered).
• Inventory management — multi-warehouse stock, bundle BOM, audit-trail of all stock movements, low-stock alerts.
• Automated bookkeeping — auto-post journal entries from delivered orders, RTS returns, OPEX, and PO payments. Generates real-time Profit & Loss reports.
• Meta Ads billing reconciliation via Gmail API — reads billing-receipt emails from @facebookmail.com sent to the business owner's Gmail, extracts the official charge amount, and reconciles it with the bank-statement debit and the imported CSV billing report.
• Cash management — sync Bank Jago bank statements and reconcile Mengantar payouts.

Privacy & legal documents (publicly accessible without login):

• Privacy Policy — https://verzaretail.my.id/privacy-policy
• Terms of Service — https://verzaretail.my.id/terms-of-service
• Contact: [email protected]

Why this application uses the Gmail API (gmail.readonly scope)

We request the https://www.googleapis.com/auth/gmail.readonly scope from the business owner's Gmail account for one specific feature: automated reconciliation of Meta Ads billing receipts.

• What we read: only billing-receipt emails from sender @facebookmail.com that contain Meta Ads invoice data. The Gmail query filter limits the scan to those messages.
• What we extract: only structured fields — transaction ID, ad-account ID, amount in IDR, currency, billing date, message ID. The full email body is processed in memory and discarded; it is not retained.
• What we never do: we do not send, modify, delete, or label any email. We never request gmail.send, gmail.modify, or gmail.compose.
• Why a more limited scope is not sufficient: gmail.metadata cannot read the email body where the billing amount is located. The amount is essential because Meta charges in IDR and the bank-debit amount can differ due to FX/rounding, so the body amount must be cross-checked.
• Data handling: extracted fields are stored in our private MySQL database, used only for accounting reconciliation, never shared with any third party.
• Revoke access: the owner can revoke access anytime at myaccount.google.com/permissions or via the in-app "Settings → Gmail API → Disconnect" button.

Full details are described in our Privacy Policy and Terms of Service.

---

Note: this homepage is publicly accessible without login. Only staff and the owner of Verza Retail have credentials to log in and use the application's features.

Estimated number of users: less than 5 (owner + staff). This is not a consumer SaaS.