--- title: Privacy-Policy --- - [Contact Us](https://grdbooks.com/contact-us) - [About Us](https://grdbooks.com/about-us) [![GRD-Books-logo](https://grdbooks.com/hs-fs/hubfs/GRD-Books-logo.png?width=75&height=75&name=GRD-Books-logo.png "GRD-Books-logo")](https://grdbooks.com/?hsLang=en) - [Home](https://grdbooks.com) - [Services](https://grdbooks.com/services) - [Industries](https://grdbooks.com/industries) - [FAQ](https://grdbooks.com/faq) - [About Us](https://grdbooks.com/about-us) - [Talk With Us](https://grdbooks.com/schedule-a-consultation) - [Contact Us](https://grdbooks.com/contact-us) - [About Us](https://grdbooks.com/about-us) # Privacy Policy **GRD Books Internal Tools · Effective date: October 19, 2026** This Privacy Policy explains how GRD Books LLC ("GRD") collects, uses, stores, and protects information in connection with the GRD Books Internal Tools application (the "App"), including information GRD accesses from Intuit QuickBooks Online ("QuickBooks") through Intuit's application programming interfaces. The App is a private, internal application. It is available only to GRD personnel who have been issued an account by GRD, and it is used solely to deliver accounting, bookkeeping, and financial reporting services to GRD's clients. The App is not offered to the general public. ## 1. Information GRD Collects ### 1.1 Information about authorized users For GRD personnel who use the App, GRD collects name, business email address, role and permissions, login records, and records of changes made in the App (for example, the time an item was signed off and by whom). ### 1.2 QuickBooks Online data When a QuickBooks company is connected to the App by an authorized administrator of that company, and only with that authorization, the App reads the following data from that company through the QuickBooks Online API: - Company information (company name and fiscal year settings); - The chart of accounts (account names, numbers, types, and status); and - Trial balance reports (account balances as of month-end dates). The App has read-only access. It does not create, change, or delete any data in QuickBooks. GRD accesses only the data needed to perform the accounting services GRD has been engaged to provide for that client. ### 1.3 Authorization credentials When a QuickBooks company is connected, Intuit issues OAuth access and refresh tokens to the App. GRD never receives or stores QuickBooks usernames or passwords. ### 1.4 Technical information GRD's servers automatically record standard technical information such as IP address, browser type, request timestamps, and error logs, for security and troubleshooting. ## 2. How GRD Uses Information GRD uses the information described above only to: - Provide bookkeeping, account reconciliation, and financial analysis and reporting services to the client the data belongs to; - Store QuickBooks data in GRD's internal systems so that GRD personnel can review, reconcile, analyze, and report on it; - Authenticate users and enforce permissions; - Secure, maintain, and troubleshoot the App; and - Comply with legal, regulatory, and professional record-keeping obligations. GRD does **not** sell, rent, or trade QuickBooks data or any personal information. GRD does not use QuickBooks data for advertising or marketing, and does not combine one client's data with another client's data. ## 3. How GRD Shares Information GRD does not share QuickBooks data with third parties except: - **With the client the data belongs to**, including reports and reconciliations GRD prepares for that client; - **With service providers** who host or operate infrastructure for the App on GRD's behalf (for example, Amazon Web Services for hosting, storage, and databases) and who are bound by confidentiality and security obligations; - **With Intuit**, as needed to operate the QuickBooks connection; and - **When required by law**, such as to comply with a subpoena, court order, or other legal obligation, or to protect the rights, property, or safety of GRD, its clients, or others. ## 4. Data Storage and Security The App is hosted on Amazon Web Services in the United States. GRD uses administrative, technical, and physical safeguards designed to protect information, including: - Encryption of all data in transit using TLS 1.2 or higher (HTTPS); - Encryption of QuickBooks OAuth tokens (AES) before they are stored, with the encryption key held separately in AWS Secrets Manager; tokens are never placed in application code, logs, or browser storage; - Storage of application secrets, such as the App's Intuit credentials, in AWS Secrets Manager; - Access limited to authorized GRD personnel, with role-based permissions; only GRD administrators can connect or disconnect a QuickBooks company; - Logical separation of each client's data; and - Audit logging of changes to client records. No method of transmission or storage is completely secure, but GRD works to protect information using commercially reasonable measures and will notify affected clients of a security incident as required by applicable law. ## 5. Data Retention and Deletion GRD retains QuickBooks data and the records it creates from it for as long as needed to provide services to the client and to meet its legal, tax, and professional record-retention obligations. When a QuickBooks company is disconnected from the App, GRD immediately stops accessing that company's data and deletes the associated OAuth tokens. A client may request deletion of its data held in the App by contacting GRD at the email address below; GRD will honor the request except where it is required to retain records by law or professional standards. ## 6. Disconnecting QuickBooks A QuickBooks company administrator may revoke the App's access at any time from within QuickBooks Online (Settings → Apps / Connected apps) or by asking GRD to disconnect it. Once access is revoked, the App can no longer retrieve data from that QuickBooks company. ## 7. Your Choices and Rights Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information GRD holds about you. To make a request, contact GRD using the information below. GRD will respond within the time required by applicable law. ## 8. Children's Privacy The App is intended for business use by GRD personnel and is not directed to children under 13. GRD does not knowingly collect personal information from children. ## 9. Changes to This Policy GRD may update this Privacy Policy from time to time. When it does, GRD will revise the effective date above and, where the changes are material, notify affected clients and users. ## 10. Contact GRD If you have questions about this Privacy Policy or GRD's handling of data, contact: GRD Books LLC Email: privacy@grdbooks.com Get Started [![](https://grdbooks.com/hs-fs/hubfs/GRD-Books-logo.png?width=75&height=75&name=GRD-Books-logo.png)](https://grdbooks.com/?hsLang=en) Chicago, IL 60007 [Follow us on LinkedIn](https://www.linkedin.com/company/grd-books) #### SERVICES - [Outsourced Controller and Bookkeeping](https://grdbooks.com/services#controller) - [Financial Planning & Analysis](https://grdbooks.com/services#fpa) - [Fractional CFO](https://grdbooks.com/services#CFO) #### INDUSTRIES - [Technology](https://grdbooks.com/industries#technology) - [Financial Services](https://grdbooks.com/industries#financial_services) - [Consumer Products](https://grdbooks.com/industries#consumer_products) - [Healthcare](https://grdbooks.com/industries#healthcare) - [Food and Beverage](https://grdbooks.com/industries#food_bev) - [Other Industries](https://grdbooks.com/industries#other) #### Company - [About](https://grdbooks.com/about-us) Copyright © 2024. All Rights Reserved. | [Privacy Policy](https://grdbooks.com/privacy-policy?hsLang=en)