Privacy Policy

Effective August 11, 2026

This policy explains how ATCOS handles information accessed through the ATCOS Books Connector, an internal software integration that connects QuickBooks Online company files operated by ATCOS and its affiliated companies to ATCOS’ own bookkeeping and reporting tools.

Information we access

When an authorized administrator connects a QuickBooks Online company, the connector may read the following through Intuit’s official QuickBooks Online Accounting API:

• Company profile information (company name, address, fiscal settings, realm identifier)
• Customers and vendors, including the contact details recorded in the company file
• Invoices, bills, payments and related transaction lines
• Chart of accounts, products and services, and standard financial reports

The connector can also create and update records in a connected company — for example, building out a product and service list when a company file is being set up or migrated. It does so only when an ATCOS operator runs a specific, named task, never automatically in the background. It does not delete records.

The connector requests the com.intuit.quickbooks.accounting scope, plus OpenID profile information used solely to identify the signing-in administrator. It does not request payroll or payment-processing scopes.

How the information is used

• Consolidated bookkeeping, reconciliation and financial reporting across the connected companies
• Internal operational reporting and forecasting
• Diagnosing and correcting errors in the connector itself

We do not sell, rent or trade QuickBooks data, and we do not use it for advertising, profiling or any purpose unrelated to operating the connected businesses.

How the information is protected

• All traffic to Intuit’s APIs runs over TLS (HTTPS). The connector makes no unencrypted API calls.
• OAuth access and refresh tokens are held in an encrypted secrets manager with per-machine access credentials. Tokens are never committed to source control and are never written to application logs.
• Access to retrieved accounting data is limited to ATCOS personnel and systems with a business need for it.
• The connector does not log the contents of QuickBooks records.

Sharing with third parties

QuickBooks data accessed by the connector is not shared with third parties, except where required by law or where a service provider processes it strictly on our behalf under a confidentiality obligation (for example, hosting or backup infrastructure).

Retention and deletion

Data retrieved through the connector is retained only as long as needed for the bookkeeping and reporting purposes above, and for any period required by tax or accounting law. Disconnecting a company revokes the connector’s access immediately and its stored tokens for that company are destroyed. To request deletion of data already retrieved, see Disconnecting.

Your choices

A QuickBooks company administrator can revoke the connector’s access at any time from within QuickBooks Online (Settings › Manage Apps) or by contacting us. Revoking access takes effect immediately and does not affect the company’s own QuickBooks data.

Changes to this policy

If this policy changes materially, the effective date above will be updated and the administrators of connected companies will be notified.

Contact