Privacy policy
Information site and attended authorization
Scotty operates this internal-use site. It has no advertising, analytics scripts or visitor accounts and does not ask for your Intuit password. Sign-in and company consent happen at Intuit. Neither company connection has yet been verified.
The authorization receiver remains disabled until its protected key custody and public-key configuration are ready. When enabled for an owner-initiated attempt, Intuit sends a short-lived authorization code, company identifier and signed state to the HTTPS callback. Cloudflare Pages processes these transiently to validate state and encrypt the response for the owner-operated Mac mini. No application database, token exchange or accounting API call runs at Cloudflare. The encrypted handoff is downloaded through your browser; readable codes and tokens are not placed in public HTML or browser storage by this application.
App secrets, callback private keys and company access/refresh tokens remain in the selectively shared OpenClaw 1Password vault. The Mac mini decrypts the handoff, exchanges the code directly with Intuit and performs owner-authorized read-only company/account discovery. Identifiers, account lists and balances are not published on this site. This connection path does not send accounting records to an AI service.
Hosting and logging
The host is Cloudflare Pages. The provider may process request metadata, including IP addresses, requested URLs and times, under Cloudflare’s privacy policy. The callback has no custom request logging or analytics. The operator must verify that no live request-log stream or configured request-log export captures callback query strings before real authorization. The application cannot promise that the hosting provider never processes request metadata.
Do not paste callback URLs into chat or email. Only use an authorization link deliberately prepared for you, and deliver the encrypted download promptly through the owner-approved handoff.
Retention, access and deletion
Callback code/state are processed in memory and encrypted; the receiver has no persistent application store. Encrypted downloads may remain on your device until you remove them. Connection credentials and pending authorization state are retained in 1Password, including its item history under the vault’s own retention controls. Local connection checks use protected locks and nonsecret recovery markers. Disconnecting in QuickBooks revokes consent but does not automatically delete retained credentials, item history or earlier accounting evidence.
Future accounting work
Transaction backfill and AI-assisted accounting review are not enabled by connection setup. Any later processing and providers require their own authorized scope and truthful policy updates. No claim is made about future providers excluding records from model training.
Contact
For privacy, access or deletion requests, contact Scotty at privacy@jdmcgee.me. Do not email passwords, authorization codes or financial records.