Privacy Policy
Lotus Studio Private Limited (“we”, “us”, or “our”) operates Financebook (the “Application”). The Application provides an integration with QuickBooks Online that allows authorized users to synchronize invoice information between QuickBooks Online and the Application.
This Privacy Policy explains what information we access, how we use it, how we protect it, and how users can request its deletion.
1. Information We Access
When you connect your QuickBooks Online company to the Application, you authorize us to access certain information from your QuickBooks Online account.
Depending on the configuration of the integration, this may include:
- Invoice numbers and identifiers
- Invoice dates and due dates
- Invoice status
- Customer names and contact information associated with invoices
- Invoice line items and descriptions
- Quantities, prices, discounts, taxes, and totals
- Payment and balance information associated with invoices
- Currency information
- Other information necessary to synchronize invoices correctly
We only request and access the QuickBooks Online data necessary to provide the invoice synchronization functionality.
2. How We Use QuickBooks Data
We use QuickBooks Online data solely to provide and operate the Application’s invoice synchronization functionality.
This includes:
- Reading invoice information from QuickBooks Online;
- Creating or updating invoice information in the Application;
- Where enabled by the integration, creating or updating invoice information in QuickBooks Online;
- Detecting changes so that invoice information remains synchronized;
- Maintaining the connection between your QuickBooks Online company and the Application;
- Trouble shooting and maintaining the synchronization service.
We do not use QuickBooks Online data for advertising, profiling, selling data, or unrelated commercial purposes.
We do not sell QuickBooks Online data or make it available to third parties for purposes unrelated to providing the Application.
3. Authorization
The Application uses OAuth 2.0 provided by Intuit to connect to QuickBooks Online.
When you connect your QuickBooks Online company, you are shown the permissions requested by the Application and must authorize access through Intuit.
We do not receive or store your QuickBooks Online username or password.
You may revoke the Application’s access to your QuickBooks Online company through the appropriate QuickBooks Online or Intuit account controls. You may also contact us to request disconnection.
4. Synchronization and Data Accuracy
To provide invoice synchronization, we may store copies of or information derived from QuickBooks Online data in our systems.
The information we retain may include:
- Synchronized invoice information;
- Identifiers required to associate records between systems;
- Synchronization status and timestamps;
- QuickBooks Online company identifiers;
- OAuth credentials required to maintain the authorized connection.
OAuth refresh tokens and other authentication credentials are stored using appropriate security controls and are not intentionally exposed to users or other parties.
5. Data Retention
We retain QuickBooks Online data only for as long as reasonably necessary to provide the Application and maintain the synchronization functionality.
If you disconnect your QuickBooks Online company from the Application, we will stop accessing and processing new QuickBooks Online data.
Unless we are legally required to retain information, we will delete or securely anonymize QuickBooks Online data associated with the disconnected company within [30 DAYS] after disconnection.
You may also contact us to request deletion of your data.
Some limited information may be retained where necessary to comply with legal obligations, resolve disputes, enforce agreements, or maintain security records.
6. Data Deletion Requests
You may request deletion of QuickBooks Online data held by the Application by contacting:
Email: lotusstudio@bofili.nl
Please include sufficient information for us to identify your account or connected QuickBooks Online company.
We will process legitimate deletion requests within a reasonable period and in accordance with applicable law.
7. Sharing of Data
We do not sell QuickBooks Online data.
We may use third-party service providers to operate the Application, such as hosting, database, monitoring, email, or infrastructure providers. Where such providers process data on our behalf, they are permitted to access data only as necessary to provide their services to us and are required to maintain appropriate confidentiality and security protections.
We do not provide QuickBooks Online data to third parties for their own independent marketing or commercial purposes.
We may disclose information where required by applicable law, regulation, legal process, or a valid governmental request.
8. Security
We take reasonable technical and organizational measures to protect information processed by the Application against unauthorized access, alteration, disclosure, or destruction.
These measures may include:
- Encryption of data in transit;
- Encryption or equivalent protection of sensitive credentials at rest;
- Access controls;
- Authentication and authorization controls;
- Monitoring and logging;
- Secure software development and infrastructure practices.
No method of transmission or storage can be guaranteed to be completely secure
9. QuickBooks Online and Intuit
The Application uses Intuit’s QuickBooks Online APIs and OAuth services.
QuickBooks Online and related services are provided by Intuit Inc. Your use of QuickBooks Online remains subject to Intuit’s applicable terms and policies.
The Application is an independent application and is not operated by or on behalf of Intuit.
QuickBooks and Intuit are trademarks of Intuit Inc.
10. International Data Processing
Depending on the location of our infrastructure and service providers, your information may be processed or stored in countries other than the country in which you are located.
Where required, we will implement appropriate safeguards for international transfers of personal information.
11. Children’s Privacy
The Application is intended for business use and is not directed toward children.
We do not knowingly collect personal information from children in connection with the Application.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the Application, applicable law, or our data practices.
The latest version will always be published at this URL, together with the date on which it was last updated.
13. Contact
If you have questions about this Privacy Policy or our handling of your information, please contact:
Lotus Studio Pvt. Ltd
2nd Floor, new building, TTPL, Babesa, Thimphu, Bhutan
Email: lotusstudio@bofili.nl