This Privacy Policy describes how Lewis Partners ("we", "us") collects, uses, and protects information in connection with the Lewis Partners QuickBooks Online Connector (the "Service").
When an authorized user connects a QuickBooks Online company, we receive: (a) OAuth access and refresh tokens issued by Intuit; (b) the QuickBooks company identifier (realm ID); and (c) accounting data (such as invoices, customers, vendors, accounts, and reports) retrieved from the QuickBooks Online API as needed to perform requested accounting workflows. We do not collect QuickBooks passwords.
Data is used solely to provide accounting and bookkeeping services requested by or on behalf of the connected business — for example generating financial reports, reviewing transactions, and preparing records. We do not sell, rent, or trade personal or business data, and we do not use it for advertising.
OAuth tokens are encrypted at rest using AES-256-GCM before storage. Data is transmitted exclusively over HTTPS/TLS. Access to stored data is restricted to the Service's backend; API keys are stored only as cryptographic hashes. Infrastructure is hosted on Cloudflare (application) and Supabase (database, hosted in Canada).
Accounting data retrieved from QuickBooks is processed within the Service and, when a workflow requests it, shared with the AI assistant session of the authorized user who initiated the request. We use the following subprocessors to operate the Service: Intuit (QuickBooks Online API), Cloudflare (hosting), and Supabase (database). We do not share data with other third parties except as required by law.
Connection tokens are retained while a QuickBooks connection remains active. When a connection is disconnected (from Intuit's App connections page or on request to us), its tokens are no longer usable and are deleted from our systems upon request. You may request deletion of stored connection data at any time by contacting us.
Subject to applicable law (including PIPEDA in Canada), you may request access to, correction of, or deletion of personal information we hold. Contact us at accounting@lewispartners.ca.
The Service is a business tool and is not directed to individuals under 18.
We may update this Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be reflected on this page.
Privacy questions or requests: accounting@lewispartners.ca.