Privacy Policy

This Privacy Policy explains how OWPS ("OWPS", "we") collects, uses, stores, and deletes information in connection with OWPS Financial Console (the "Application"), an internal reporting tool that connects to Intuit QuickBooks Online.

1. Scope

The Application is used only by authorized OWPS personnel. It is not a consumer product and is not marketed to the public. This policy covers data processed through the Application, including data retrieved from QuickBooks Online.

2. Information we collect

• QuickBooks accounting data. Company profile, chart of accounts, customers, vendors, invoices, bills, payments, expenses, journal entries, and standard reports such as Profit & Loss and Balance Sheet, retrieved through the Intuit Accounting API.
• Connection data. The QuickBooks company (realm) identifier, OAuth 2.0 access and refresh tokens, token expiry timestamps, and connection status.
• Account data. Names and work email addresses of authorized internal users.
• Technical data. Application and server logs, including timestamps, IP addresses, and error diagnostics.

We do not collect payment card numbers, bank account credentials, or QuickBooks login credentials. Authorization happens on Intuit's own sign-in pages; we never see your QuickBooks password.

3. How we use information

• to authenticate and maintain the QuickBooks Online connection;
• to generate internal financial dashboards, summaries, and management reports;
• to diagnose errors, monitor reliability, and secure the Application;
• to meet legal, accounting, and audit obligations.

We do not sell, rent, or trade any information. We do not use QuickBooks data for advertising, and we do not use it to train machine-learning models.

4. Legal basis

Where the GDPR or similar law applies, we process this information on the basis of our legitimate interest in operating and reporting on our own business, and for compliance with legal obligations.

5. Sharing and subprocessors

Information is shared only with service providers that host or operate the Application under contract, and only to the extent needed to provide their service:

• Intuit Inc. — source of the accounting data via the QuickBooks Online API.
• Cloud hosting and managed database provider (United States). — application hosting, encrypted database storage, and authentication.

We may also disclose information where required by law, subpoena, or other valid legal process, or to protect our rights, safety, or property.

6. Storage and security

• All data is transmitted over TLS 1.2 or higher.
• Data at rest is stored encrypted in a United States region.
• OAuth access and refresh tokens are stored server-side only, in a table that is not readable by browser clients, and are never exposed to the front end or written to logs.
• Access is limited to authorized personnel on a least-privilege basis.
• Application and infrastructure logs are monitored for anomalous activity.

No system can be guaranteed completely secure, but we take commercially reasonable measures appropriate to the sensitivity of financial data.

7. Retention and deletion

• OAuth tokens are retained only while the QuickBooks connection is active.
• When you disconnect — from the Disconnect page, from within QuickBooks Online, or by request — we revoke the token with Intuit and delete the stored tokens promptly, and in any case within 30 days.
• Cached accounting records are deleted or anonymized within 60 days of disconnection, except where retention is required for legal, tax, or audit purposes.
• Technical logs are retained for up to 90 days.

8. Your rights

Depending on your jurisdiction you may have the right to access, correct, export, restrict, or delete personal information we hold about you, and to object to certain processing. Send requests to privacy@owps.com. We respond within 30 days.

9. International transfers

The Application and its data are hosted in the United States. If you access it from outside the United States, your information will be transferred to and processed there.

10. Children

The Application is a business tool and is not directed to, or intended for use by, anyone under 18. We do not knowingly collect information from children.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the effective date at the top of this page, and where appropriate we will notify authorized users directly.

12. Contact

OWPS — Privacy
Email: privacy@owps.com
General enquiries: support@owps.com