Privacy Policy

1. Scope

This Privacy Policy explains how GrowthBound LLC (“GrowthBound,” “we,” “us,” or “our”) handles information through Transaction Manager (the “Application”). The Application is an internal business tool available only to users authorized by GrowthBound.

This policy applies to information processed by the Application and its supporting synchronization worker. It does not replace the privacy policies of Intuit Inc., QuickBooks Online, or other services that users choose to connect.

2. Information we process

Depending on the companies and features an authorized user connects, the Application may process:

• QuickBooks company identifiers, company names, connected account information, and authorization status.
• Bank-feed and accounting transaction details, including dates, bank text, amounts, accounts, categories, classes, payees, posting status, and links to resulting QuickBooks records.
• QuickBooks reference data, including chart-of-accounts entries, vendors, customers, employees or other payees, and classes.
• Transaction drafts, splits, posting and exclusion requests, automation rules, approval records, synchronization schedules, logs, errors, and reconciliation results.
• User and device-related operational information needed to authenticate authorized users, identify synchronization workers, prevent misuse, and troubleshoot the Application.
• OAuth access and refresh tokens issued by Intuit. The Application does not request or store a user’s QuickBooks password.

3. How information is used

We use information only to operate, secure, support, and improve the Application for GrowthBound’s internal accounting workflows. This includes displaying and reconciling transactions; suggesting or applying classifications; queuing, executing, and verifying authorized actions; refreshing reference lists; maintaining audit and synchronization records; and diagnosing errors.

We do not sell personal information or use QuickBooks data for third-party advertising.

4. Sources and authorization

Information is provided by authorized users, obtained from connected QuickBooks Online companies through Intuit APIs, or collected by the locally installed browser synchronization worker while an authorized QuickBooks session is active. Each QuickBooks connection is established using Intuit’s OAuth authorization process and is limited to companies the authorizing user can access.

5. How information is disclosed

Information may be disclosed only as needed to:

• Intuit and QuickBooks Online to authorize connections, retrieve authorized data, and carry out requested accounting actions.
• Service providers that host, secure, monitor, or support the Application, subject to their applicable terms and safeguards.
• GrowthBound personnel and contractors who require access for the permitted internal business purpose.
• Government authorities, professional advisers, or other parties when reasonably necessary to comply with law, protect rights or security, investigate misuse, or complete a business reorganization.

Connected company information is not disclosed to unrelated companies merely because they also use the Application.

6. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. Access to the operational Application is restricted to authorized users. Intuit OAuth tokens are stored in encrypted form, and application secrets are maintained separately from public site content. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

7. Retention and deletion

We retain information for as long as reasonably necessary to operate the Application, support accounting and audit needs, satisfy legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on the type of record and the requirements of the connected company.

An authorized administrator may disconnect a QuickBooks company, revoke the Application through Intuit, or request deletion by contacting us. After a verified request, we will delete or de-identify information that is no longer required, subject to legal, accounting, backup, fraud-prevention, and security obligations. Data already posted to QuickBooks remains governed by the connected company and Intuit.

8. Choices and rights

Authorized users may ask to access, correct, or delete information controlled by GrowthBound by contacting us. Requests will be verified and handled as required by applicable law. Users may also manage or revoke the QuickBooks connection from their Intuit account. Revocation stops future API access but may not automatically delete records already maintained for legitimate internal or legal purposes.

9. Processing locations

The Application and its providers may process information in the United States and other locations where service providers operate. Appropriate safeguards are used where required by applicable law.

10. Changes to this policy

We may update this policy as the Application, connected services, or legal requirements change. The effective date above identifies the current version. Material changes will be communicated through an appropriate internal channel or within the Application.

11. Contact

For privacy questions, requests, or concerns, contact:

GrowthBound LLC
North Carolina, United States
jcalvillo@growthbound.com