Privacy Policy

Flatbooks helps bookkeepers and accounting firms consolidate a client’s multiple QuickBooks Online companies — finding the exact intercompany break and, with your approval, posting the correcting entry back to QuickBooks. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

• Account information — your name and email, handled through our authentication provider when you sign up.
• Workspace data — the clients (consolidation groups), connected companies, and account mappings you create.
• Billing information — handled by our payment processor. We never see or store your full card number.
• Diagnostics — error reports and basic product analytics, used to keep the service working and improve it.

Your QuickBooks data

When you connect a QuickBooks Online company, you authorize Flatbooks — through Intuit’s API — to access that company’s accounting data: its trial balance, balance sheet, profit & loss, and chart of accounts. We use this only to build the consolidation, detect intercompany breaks, and produce the export.

The one-click fix writes a single correcting journal entry back to a company — and only after you have reviewed and approved the exact entry. You can undo a posted fix. We request the minimum scope needed (accounting only). We store the OAuth tokens Intuit issues — encrypted at rest — never your QuickBooks username or password.

How we use it

To provide the service (consolidate, detect, fix, export), process billing, provide support, and keep the service secure and reliable. We do not sell your data or your clients’ data, and we do not use it for advertising.

Storage & security

QuickBooks tokens are encrypted at rest (AES-256-GCM). Data is transmitted over HTTPS. Connection and financial data is accessible only by our server, never exposed to the browser.

Cookies

We use a small number of first-party cookies, and no advertising or cross-site tracking cookies.

• Signing you in — a session cookie set by our authentication provider so you stay signed in. Strictly necessary.
• Connecting QuickBooks — three short-lived cookies (about ten minutes) that carry a one-time security token, remember which client you were connecting, and — when you use Reconnect — which company that button meant, so the connection can’t be forged, misrouted, or quietly swapped for a different company. They’re removed as soon as the connection finishes.
• Remembering your reporting month — the month you last selected, kept for 45 days, so returning mid-close doesn’t reset your practice to the current calendar month. A preference, nothing more.

Our product analytics runs on our server, not in your browser — there is no analytics or advertising script, and no tracking cookie, on any page. Blocking or clearing cookies won’t break the app, though you’ll be signed out and your reporting month will reset.

Service providers

We rely on a small set of providers, each processing data only to perform their function:

• Intuit (QuickBooks Online) — the source of the accounting data you connect.
• Authentication, payments, database, hosting, and error monitoring providers — to sign you in, bill you, store your workspace data, run the app, and detect faults.

Your choices

• Disconnect any time — disconnecting a company revokes Flatbooks’ access at Intuit and removes the connection.
• Delete your account — delete it yourself any time from Account settings; this revokes Flatbooks’ QuickBooks access and permanently removes your data. You can also email us.
• Access & correction — email us to access or correct your information.
• On the waitlist but not a customer — you have no account to delete; email founder@flatbooks.ioand we’ll take your address off the list. The confirmation email carries the same link.

Data retention

We retain your workspace and connection data while your account is active. When you disconnect a company we remove the connection and revoke the token; when you delete your account we delete your data.

Changes

We may update this policy; we’ll revise the date above when we do.

Contact

Questions about privacy: founder@flatbooks.io. See also our Terms of Service.