This Privacy Policy describes how J3C Consulting LLC ("J3C", "we", "us") handles information in connection with J3C Books Sync (the "Software"), a private internal integration with QuickBooks Online.
Summary. The Software is used by J3C to access J3C's own accounting records. It has no external users and no customer accounts. It does not collect personal information from the public, does not use cookies or analytics, and does not sell or share data with anyone. Accounting data is read from QuickBooks Online and processed on hardware controlled by J3C. When the Software is operated through an AI assistant, accounting data is transmitted to that assistant's provider for processing — see Section 6.
This Policy applies to the Software and to this website. The Software is not offered to the public and does not process the personal information of any individual other than J3C's own personnel and the business records contained in J3C's QuickBooks Online company file.
When authorized, the Software accesses data from J3C's QuickBooks Online company file through
Intuit's Accounting API, under the com.intuit.quickbooks.accounting scope. This may include:
This information is the business record of J3C. Customer and vendor records may contain the names and contact details of individuals; that information originates from J3C's own business relationships and is not collected from those individuals through the Software.
None. This website consists of static pages. It sets no cookies, runs no analytics or advertising scripts, embeds no third-party trackers, and contains no forms. Standard server request logs may be retained by our hosting and content delivery providers in the ordinary course of operating the site.
The Software authenticates using Intuit's OAuth 2.0 flow. Authorization is granted explicitly by a J3C administrator from within QuickBooks Online. The resulting client identifier, client secret, refresh token, and company realm identifier are stored in a local configuration file on hardware controlled by J3C. Credentials are excluded from source control. Refresh tokens rotate on use in accordance with Intuit's token lifecycle.
We do not store QuickBooks Online usernames or passwords. The Software never receives them; Intuit handles authentication directly.
Accessed data is used solely to:
It is not used for advertising, profiling, model training, resale, or any purpose unrelated to J3C's own accounting.
The Software is designed to be operated through an AI assistant using the Model Context Protocol. When used in this way, accounting data retrieved from QuickBooks Online is transmitted to the provider of that assistant so it can be processed and presented in response to J3C's requests.
J3C currently operates the Software with Claude, an AI assistant provided by Anthropic, PBC. Data sent in the course of that use is handled under Anthropic's commercial terms and privacy practices, available at anthropic.com/legal/privacy. Under those commercial terms, inputs and outputs submitted through Anthropic's API are not used to train its models.
Only data that J3C's operator actively requests is transmitted. The Software does not stream or synchronize the company file in bulk, and it does not transmit OAuth credentials, the client secret, or the refresh token to any AI provider. If the Software is operated without an AI assistant, no data is transmitted to any provider other than Intuit.
The Software reads from QuickBooks Online on demand. It does not operate a central database or maintain a persistent copy of the company file. Report output and working files generated during use are stored locally on hardware controlled by J3C and retained only as long as needed for bookkeeping and tax recordkeeping, consistent with applicable record retention requirements. Credentials are retained until revoked or rotated.
We do not sell, rent, or trade any data accessed through the Software. We do not disclose it to third parties, except:
QuickBooks Online is operated by Intuit Inc. Data residing in QuickBooks Online is subject to Intuit's own privacy practices, available at intuit.com/privacy. This Policy governs only J3C's handling of data once accessed through the Software.
We take reasonable measures appropriate to a private single-company integration, including: transmitting all API traffic over TLS; storing credentials in a local file excluded from source control; limiting the OAuth grant to the accounting scope only; operating the Software in a read-only configuration except when a change is deliberately authorized; and revoking and rotating credentials upon suspected exposure.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Authorization can be revoked at any time from within QuickBooks Online, under Settings → Apps → Connected apps, or by visiting our disconnect page for instructions. Revocation immediately invalidates the refresh token and ends the Software's ability to access the company file.
The Software is a business accounting tool. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16.
We may update this Policy from time to time. The revised version takes effect when posted at this address, and the "Last updated" date above will be changed accordingly.
Questions about this Policy may be directed to:
J3C Consulting LLC
finance@j3c.io