Privacy Policy
This Privacy Policy describes how the Crank & Boom QuickBooks Online Integration (the “Application”) accesses and handles information. The Application is a private, internal software integration operated by Mike Green on behalf of Crank & Boom and its affiliated entities (BICG Properties, BMPG Properties, and TOC Properties) (collectively, the “Operator”). It is used solely to access and manage QuickBooks Online accounts that the Operator owns or is authorized to administer. It is not offered to, or used by, the general public.
Information the Application accesses
When connected to a QuickBooks Online company through Intuit’s official API, the Application may access financial and accounting data belonging to that company, which may include: company profile information; chart of accounts; customers and vendors; invoices, bills, expenses, purchases, and payments; journal entries; classes and departments; and financial reports (such as profit & loss, balance sheet, and general ledger). To maintain the connection, the Application stores the OAuth 2.0 tokens (access and refresh tokens) and the company realm identifier issued by Intuit.
How the information is used
Accessed data is used exclusively for the Operator’s own internal purposes: financial reporting and analysis, bookkeeping, reconciliation support, and authorized data entry for the Operator’s own businesses. The Application does not use the data for advertising, profiling, resale, or any purpose unrelated to operating the Operator’s own accounting.
How the information is shared
The Operator does not sell, rent, or trade QuickBooks data, and does not share it with third parties for their own independent use. Data is transmitted to and from Intuit’s API and processed only to provide the functionality described above. Processing occurs on infrastructure controlled by the Operator and through service providers engaged solely to operate the Application on the Operator’s behalf; those providers are permitted to process the data only to deliver the service and not for any independent purpose.
Data storage and security
- All communication with Intuit’s API occurs over encrypted HTTPS connections.
- OAuth tokens are stored with restricted file permissions on Operator-controlled systems and are used only to refresh access to the connected company.
- The Application follows least-privilege principles: read-only or restricted-write modes are used wherever practical, and destructive operations can be disabled per connected company.
- Access to the systems running the Application is limited to the Operator.
Data retention and deletion
Stored tokens and any cached data are retained only as long as needed to operate the connection. The Operator can revoke the Application’s access at any time from the Intuit / QuickBooks account settings (by disconnecting the app), which invalidates the tokens. Upon revocation, the corresponding stored tokens are deleted from the Operator’s systems.
No consumer or end-user data
The Application processes only the business accounting records of the Operator’s own companies. It is not directed to consumers or children and does not knowingly collect personal information beyond what those business records already contain.
Changes to this policy
This policy may be updated from time to time. Material changes will be reflected by updating the effective date above.
Contact
Questions about this Privacy Policy can be directed to Mike Green at mike@crankandboom.com.