Privacy Policy

Polygon Automation (“Polygon Automation”, “we” or “us”) provides a service that reads accounting data from Intuit QuickBooks Online on your behalf. This policy explains what we access, why we access it, how long we keep it and how you can have it deleted.

1. Information we collect

QuickBooks authorization data. When you connect a QuickBooks company we receive an OAuth 2.0 access token, a refresh token and the company identifier (“realm ID”). We never receive, request or store your Intuit username or password.

QuickBooks accounting data. Using that authorization we read records from the QuickBooks Online Accounting API, which may include company profile details, chart of accounts, customers, vendors, employees, items, invoices, bills, payments, journal entries and standard financial reports. Depending on how your books are kept, these records can contain names, business and personal addresses, email addresses, phone numbers and transaction amounts.

Technical data. We process standard server and application logs, such as IP address, timestamps and error traces, to operate and secure the Service.

2. How we use information

• To authenticate to QuickBooks and keep your connection active.
• To retrieve and display the accounting data you asked the Service to show.
• To diagnose errors, maintain security and prevent abuse.
• To respond to your support requests.

We do not sell your information, rent it, or use your QuickBooks data for advertising. We do not use your accounting data to train machine learning models.

3. Read-only access

The Service issues retrieval requests only. It does not create, alter or delete records in your QuickBooks company. Intuit does not offer a read-only accounting scope, so the scope shown on the authorization screen (com.intuit.quickbooks.accounting) covers both reads and writes; our application performs reads.

4. Storage and security

• OAuth tokens are encrypted at rest using AES-256-GCM with a key held only by the application environment.
• All traffic to Intuit and to this application uses HTTPS/TLS.
• Access to production systems is limited to personnel who need it to operate the Service.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

5. Sharing and disclosure

We share information only with Intuit, as required to make API requests on your behalf; with infrastructure providers that host the Service under confidentiality obligations; and where required by law or to protect our legal rights. We do not disclose your QuickBooks data to any other third party.

6. Retention and deletion

OAuth tokens are retained for as long as your QuickBooks company is connected. When you disconnect, we revoke the token with Intuit and delete it from our storage. Any cached accounting data is removed at the same time. Operational logs are retained for a limited period for security and troubleshooting, then deleted.

You can disconnect at any time from the dashboard in this application, from the disconnect link in the footer, or from Apps → My Apps inside QuickBooks Online. To request deletion of any remaining information, email privacy@polygonautomation.com.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete personal information we hold, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. Contact us at privacy@polygonautomation.com and we will respond within the period required by applicable law.

8. International transfers

The Service is operated from the United States. If you access it from elsewhere, your information may be transferred to and processed in the United States under appropriate safeguards.

9. Children

The Service is a business tool and is not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this policy. Material changes will be reflected by a new effective date at the top of this page, and where appropriate we will notify you directly.

11. Contact

Polygon Automation
Add your business mailing address here
privacy@polygonautomation.com