Privacy Policy
1. Overview and scope
This Privacy Policy explains how Black Sheep Global (“BSG”, “we”, “us”) handles data accessed through the QuickBooks Online integration inside our internal operating system. The integration is used solely for BSG’s own internal business operations. It is not a public product and is not offered to outside customers.
2. What data we access from QuickBooks / Intuit
Through Intuit’s authorized APIs, the integration accesses a limited set of records from a single QuickBooks Online company file: customers, invoices, and payments. We do not access your QuickBooks login credentials, and we do not request data beyond what is needed for the reporting described below.
3. How we use the data
We use this data only for internal financial reporting and operations. Specifically, we map QuickBooks customers to internal client records and produce accounts-receivable (AR) aging, payment history, and an internal churn-risk forecast. The data is used by the internal BSG team only.
4. How we store and protect the data
- OAuth access and refresh tokens are encrypted at rest using AES encryption. Refresh tokens are rotated and re-persisted on each refresh.
- The OAuth callback uses an HMAC-signed state value and rejects forged or tampered state.
- All financial-data endpoints require an authenticated session. No endpoint returns an OAuth token in any response.
- Data is transmitted over HTTPS/TLS.
- We never store QuickBooks login credentials — only the OAuth tokens issued by Intuit.
5. Sharing
We do not sell your data, and we do not share QuickBooks or Intuit data with any third party. Access is limited to authorized members of the internal BSG team.
6. Data retention
We keep QuickBooks data only while the integration is connected and only for as long as it is needed for the internal reporting described above. If the integration is disconnected, we stop syncing new data. Stored QuickBooks data is deleted when it is no longer needed for these internal purposes, or upon request to the contact below.
7. Disconnecting
You can disconnect the QuickBooks Online company from the integration at any time, from within QuickBooks or the app. On disconnect, the integration stops syncing data from QuickBooks.
8. Contact
Questions about this policy or about how we handle data can be directed to michael@blacksheepglobal.net.