Privacy policy

Rental Accounting Extract · Last updated August 6, 2026

Rental Accounting Extract is a private application. It is used only by the owners of the two QuickBooks Online companies whose data it reads, and by people they authorize to operate it on their behalf. It has no other users, it is not distributed, and it is not offered to anyone else. This policy describes what it does with data, and it is short because the application does very little.

What data is accessed

Accounting reports and reference lists from QuickBooks Online: profit and loss, balance sheet, general ledger, trial balance, the chart of accounts, and the class list. The application only ever issues read requests. It never creates, changes, or deletes anything in QuickBooks. Intuit publishes no read-only accounting scope, so the permission granted is broader than the use; the restriction is in what the application does.

Some of these reports, the general ledger in particular, contain information about people the businesses transact with, including tenants. That information is handled the same way as everything else described here: it stays on the owners' own computer and is disclosed to no one.

What is done with it

Retrieved data is written to files on a computer owned by the same people who own the QuickBooks companies, and is used for their own financial analysis of their own businesses.

Who it is shared with

No one. Retrieved accounting data is not sold, rented, transmitted to any third party, uploaded to any service, or used to train anything. It travels only between Intuit and the owners' own hardware.

One narrow exception, stated because it is a third party and we would rather name it than imply otherwise: this site is hosted on Cloudflare Pages, and Intuit will not accept a local address as the destination it returns an authorization to. So when a QuickBooks company is connected, the short-lived authorization code passes through this site on its way to the application. That code carries no accounting data, is usable once, expires within minutes, and is useless without a secret that never leaves the owners' password manager. No accounting data ever passes through this site.

How access is secured

The application's credentials are held in a password manager and read at run time; they are never written into the source code. Authorization tokens are stored on the local computer, readable only by the operating system account that runs the application, and never included in logs. Multi-factor authentication is enabled on the account used to authorize the application. The application has no public network endpoint and accepts no connections from the network; the only listener it ever opens is on the loopback address of the operator's own computer, briefly, to receive the result of an authorization the operator just started.

How long data is kept

Retrieved reports are kept as long as they are useful for the owners' analysis, and are deleted by the owners at their discretion. Authorization can be revoked at any time from QuickBooks Online, or from the application itself; see disconnecting.

Children

The application is not offered to the public and is not directed at children. It collects nothing from anyone; it reads business accounting records belonging to the two companies that authorized it.

Changes and contact

If this policy changes, the date above changes with it. Enquiries about the application should go to san.jose.rental.units@gmail.com.