What we access from QuickBooks Online
You connect QuickBooks Online through Intuit's OAuth 2.0 flow and grant access explicitly. We never ask for your QuickBooks username or password, and we cannot see them.
We connect with the QuickBooks Accounting scope (com.intuit.quickbooks.accounting). We read the accounting records the product works on — your company information, chart of accounts, vendors, customers, bills, invoices, purchases, bill payments, classes and items — and we write back the transactions you have approved. Nothing is written to your books without your approval.
We request only what the product needs to do its work. Intuit's own requirements prohibit exporting or storing QuickBooks data for any purpose other than the functional use of the app, and we hold to that.
Where it is stored, and how it is protected
Your QuickBooks data is stored on Google Cloud Platform, in the United States (region us-central1). All traffic is over HTTPS.
Everything is encrypted at rest. Google Cloud encrypts all stored data with AES-256 (Google-managed keys) by default; in addition, your QuickBooks refresh token and Realm ID are encrypted at the application layer with AES, and that key is held in configuration separate from the data, as Intuit's security requirements specify.
Neither your QuickBooks data nor any credential or token is written to application logs.
How long we keep it, and how to delete it
We keep your QuickBooks data for as long as your account is active and you are using the app.
When you disconnect AI Bookkeeper or close your account, we delete the QuickBooks data we hold within 30 days. If you want it erased sooner, write to the privacy contact below and we will do it.
Disconnecting AI Bookkeeper from inside QuickBooks Online revokes our access immediately; Intuit stops honouring our tokens from that moment.
Who else sees it
Hosting is Google Cloud Platform, in the United States (region us-central1).
The generative AI that reads your documents runs on Google Vertex AI (Gemini), inside our own Google Cloud project and under Google's Cloud Data Processing Addendum. Your documents and QuickBooks data are processed there only to produce your extraction, are not used to train any model, and are not sent to any AI provider outside our Google Cloud environment.
If you forward documents to AI Bookkeeper by email, Mailgun receives and relays that email — including its attachments — so we can ingest it; it is our email sub-processor for that path. We use no separate error-monitoring, analytics or advertising provider inside the product.
We do not sell your data, and we do not use it to advertise to you.
Generative AI
AI Bookkeeper uses generative AI to read documents and suggest coding. This is declared to Intuit.
The model is Google's Gemini, served through Vertex AI in our own Google Cloud project. Your data is not used to train it.
Every output is a suggestion. Nothing reaches your books without a person approving it.
Your rights and how to reach us
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted.
Write to privacy@aibookkeeper.com, and we will respond within 30 days.