Privacy Policy

Effective date: June 3, 2026

This Privacy Policy describes how the Invoice-to-QuickBooks Automation application (the “App”) handles information. The App is a personal-use tool operated by Justin Wang (the “Operator”) to process the Operator's own invoices into the Operator's own QuickBooks Online company. It is not offered as a service to other parties.

1. Where the App runs

The App runs locally on the Operator's own computer. There is no hosted backend or central database that stores customer data. Configuration and OAuth tokens are stored only in local files (.env and qbo_tokens.json) on that machine.

2. Information the App accesses

• Invoice PDFs selected by the Operator, and the text extracted from them (vendor name, invoice number, dates, amounts).
• QuickBooks Online data needed to create bills — for example vendor records — accessed via Intuit's API under the Accounting scope.
• OAuth tokens issued by Intuit, stored locally to maintain the connection.

3. Third-party services

To function, the App transmits data to two third parties:

• Intuit / QuickBooks Online — to read vendors and create bills. Governed by Intuit's privacy policy.
• Anthropic (Claude API) — extracted invoice text is sent to the Claude API to parse it into structured fields. Governed by Anthropic's privacy policy.

The App does not send data to any other recipient.

4. How information is used

Accessed data is used solely to create bills in the Operator's QuickBooks company. The App does not sell, rent, or share data, does not use it for advertising, and does not build profiles. There are no analytics or tracking.

5. Retention

The App does not maintain a long-term datastore. OAuth tokens persist locally until the Operator revokes access or deletes the token file. Invoice PDFs remain wherever the Operator keeps them on their own machine.

6. Disconnecting and deletion

The Operator can disconnect at any time by revoking the App in QuickBooks (Settings → Apps → Disconnect) or by deleting the local qbo_tokens.json file. See How to disconnect.

7. Security

Tokens and secrets are kept in local files excluded from source control. Communication with Intuit and Anthropic uses encrypted HTTPS connections.

8. Changes

This policy may be updated; the effective date above will change accordingly.

9. Contact

Questions: justin07751@gmail.com