Privacy

What this tool is

The QBO Consultant Toolkit is a private command-line utility operated by a single business consultant on her own workstation. It is not a hosted service, it is not distributed, sold, or published, and it has no end users other than the operator. This website consists of static pages only; nothing on this domain collects, stores, or transmits anything.

What data it accesses

The tool accesses QuickBooks Online accounting data of client companies that have authorized the connection through Intuit's standard OAuth consent flow, performed by each company's own QuickBooks administrator. It requests the accounting scope only — no payments, payroll, or profile data. Access lasts for the duration of the consulting engagement and is revoked at its close.

Where data is stored

All data is stored locally on one workstation protected by full-disk encryption and operator authentication. There is no cloud database, no server component, and no multi-tenant infrastructure. Long-term archives are encrypted on that workstation, using a key held only by the operator, before upload to Google Cloud Storage — the storage provider holds ciphertext only and has no access to readable client data.

Who has access

One named individual: the operator. Client personnel do not have access to the tool, its credentials, or its stored data.

Sharing

None. The tool contains no analytics, no telemetry, and no error-reporting integrations. No data is sold or transferred. It communicates only with Intuit's APIs over HTTPS/TLS and with the encrypted archive storage described above, which is the sole sub-processor.

Retention

Client data is retained for the duration of the engagement plus seven years, in line with the retention period applied to records supporting tax positions. Archived records are destroyed at the end of that period by the storage platform's lifecycle policy.

Ending access

A company can end access at any time by disconnecting the application from the Apps section of its own QuickBooks Online account, or by contacting the operator at the address below. Disconnection revokes the connection's tokens immediately.

Incidents

If the operator's workstation is lost, stolen, or believed compromised, all active connections are revoked through Intuit from a clean machine, application credentials are rotated, and each affected client's owner and tax preparer are notified within 24 hours. Stored tokens and archives are encrypted at rest, which bounds the exposure of the machine itself.