Privacy Policy

Effective date: 8 May 2026

This Privacy Policy describes how the Bill Parser application (the “Software”), operated internally by Carrits Real Estate, LLC (“Carrits”), handles information when used by authorized Carrits personnel. The Software is not a publicly distributed application; it is used solely by Carrits to operate on Carrits’ own QuickBooks Online company data.

1. Scope

This policy applies only to the Bill Parser application. It does not cover Intuit’s QuickBooks Online service itself, which is governed by Intuit’s own privacy policy.

2. Information processed

The Software processes the following categories of information:

• QuickBooks Online data belonging to Carrits Real Estate, LLC, retrieved through the Intuit QuickBooks Online API (for example: vendor records, customer records, transactions, accounts, and attachments). The Software may also create or modify such records on behalf of an authorized user.
• OAuth credentials (access tokens, refresh tokens, and the associated QuickBooks Online realm identifier) used to authenticate the Software to the QuickBooks Online API.
• Operational logs generated locally on the operator’s workstation (for example: requests issued and errors raised).

The Software does not collect personal information from any third party. It does not process data from any QuickBooks Online company other than Carrits Real Estate, LLC’s own.

3. Where information is stored

• QuickBooks Online data continues to live in QuickBooks Online; the Software reads and writes against Intuit’s API. Any locally cached data resides in a SQLite database on the operator’s workstation.
• OAuth credentials are stored locally on the operator’s workstation. They are not transmitted to any party other than Intuit during normal authenticated API calls.
• Operational logs remain on the operator’s workstation.

4. Sharing

The Software does not share information with any third party. It communicates only with Intuit’s QuickBooks Online API in order to perform the actions an authorized operator initiates. The Software does not perform analytics, telemetry, advertising, or any form of usage tracking.

5. Retention

OAuth credentials are retained until the operator runs qbo-mcp auth logout, the credentials are revoked through QuickBooks Online (Apps → My apps), or the credentials expire. Locally cached data and operational logs are retained on the workstation until the operator deletes them or removes the application.

6. Security

OAuth credentials and locally cached data are protected by the file-system permissions of the operator’s workstation. Authorized operators are required to keep their workstations and accounts secure and to revoke the Software’s access promptly if a workstation is lost, compromised, or no longer in use.

7. Changes to this policy

This policy may be updated from time to time. Material changes will be reflected by updating the effective date above.

8. Contact

Questions about this Privacy Policy or about how Bill Parser handles information may be directed to Carrits Real Estate, LLC through the contact information on file with Intuit.