Privacy Policy
Effective October 2, 2026
AR is a private accounts receivable project for authorized internal business use. The “Operator” is the person or organization that provides and authorizes access to your installation. This policy covers the project's authorized data access and this public legal website.
1. Current scope
AR is under development and is not a publicly available account-registration service. Initial integration work concerns read-only access to QuickBooks Online for client balances and receivables reporting. Local application caching, notes, and summaries are planned features, not a claim that a complete application is already operating. Gmail integration is not currently enabled; this policy will be updated before email access or other materially different processing is introduced.
2. Information accessed
After an authorized user connects a QuickBooks company, integration work may access company identifiers and settings; client names and contact details; invoices, due dates, and balances; payments, credits, and related transaction references; and accounts receivable reports. OAuth authorization also supplies account identifiers and access and refresh tokens. We do not ask you to give AR your QuickBooks password.
The planned local application will also store notes and summaries entered or approved by authorized users, together with record identifiers, timestamps, and synchronization information. Only information needed for the authorized workflow should be retrieved or retained.
3. Purposes
Information is used to establish and maintain authorized connections, understand and reconcile accounting records, display outstanding client balances, and support internal receivables workflows. Operational information may be used to diagnose connection or synchronization failures. AR does not use connected financial data for advertising, sale, or training general-purpose AI models.
4. Storage and access
The current research connection runs on the Operator's computer and stores OAuth credentials in the operating system's credential store. Any retained research exports are private local files, not content for this public website or repository.
The planned application will keep imported records, local notes, and summaries in a per-user local database. Local storage is not a promise of database-level encryption. Protection also depends on device security, account permissions, disk encryption, and any backups the Operator configures. Authorized local tools and users with sufficient access to that computer may be able to access locally stored information.
5. Disclosure and service providers
Authorized API requests and authentication exchanges are sent to Intuit to provide the QuickBooks connection. Intuit handles information under its own terms and privacy practices. Connected business data is not intentionally published on this legal website or sent to an advertising or analytics service. No external AI processing service is part of the current integration setup.
The Operator may disclose information when required by applicable law or as necessary to respond to lawful requests or protect legal rights. Business records remain subject to the connected business's own access, confidentiality, and legal obligations.
6. Retention and deletion
Keep local research copies and future application records only as long as needed for the authorized purpose or applicable recordkeeping obligations. There is no automatic deletion schedule implemented for the current research setup; the Operator must review and remove retained copies when they are no longer needed.
Revoking a connection stops future authorized access but does not automatically erase previously downloaded records, backups, or records held by Intuit. The planned application uses soft deletion for record history; marking a record deleted is not permanent erasure. Requests for permanent removal require the Operator to address the relevant local records and backups, subject to applicable retention obligations. Removing a local copy does not delete the source accounting record.
7. Choices and privacy requests
You may decline to connect an account and may revoke the integration through QuickBooks' connected-app controls. For access, correction, deletion, or other applicable privacy requests, contact the Operator through the existing business contact channel used to arrange your access. If you are a client whose records are managed by a business using AR, contact that business directly. Requests are subject to identity and authority verification and applicable law.
Do not post credentials, customer records, or privacy-request details in the public source repository.
8. This website
This static legal website has no account forms, application database, analytics scripts, advertising, or site-added cookies. It is hosted on GitHub Pages. GitHub and its infrastructure providers receive normal web-request information, such as IP addresses and browser/request metadata, and may process it for hosting and security under their own policies. The website does not receive QuickBooks records or act as the application's OAuth callback.
See the GitHub General Privacy Statement and Intuit Global Privacy Statement for those providers' practices.
9. Changes
The Operator will update this page when processing practices materially change and notify authorized users before introducing materially different uses of their connected data. The effective date above identifies this version.