This is a private, internal integration operated by Vermont Private Eye and Community Works. It has no public users and collects no personal information from anyone outside these businesses.
With the account owner's authorization, it reads and writes accounting records in
QuickBooks Online company files owned by these businesses — transactions, invoices,
bills, accounts, and reports — using the accounting scope only. It does
not access payroll or payments data.
OAuth tokens are stored on a single private server operated by these businesses, in files readable only by the service account that uses them. Accounting data is retrieved on demand for the task at hand. No data is sold, shared with third parties, or used for advertising, and none is transferred to any party outside these businesses.
Disconnecting the app in QuickBooks Online immediately invalidates its tokens; stored credentials are deleted on request. Contact raz@vtprivateye.com.
All traffic uses HTTPS. Credentials are held with restrictive file permissions, are never committed to source control, and are never exposed in a browser.