What this application is
Isotropic Books Agent is an internal tool built and run by Isotropic Solutions, Inc. It connects to our own QuickBooks Online company so our staff can create and maintain our accounting records without working through the QuickBooks web interface.
The application isn't offered to the public. There are no customer accounts, no sign-up, and no way for anyone outside our company to use it. It connects to one QuickBooks company: ours.
What data it touches
When our staff use the application, it reads and writes records in our own QuickBooks Online company. That includes customers, vendors, invoices, bills, items, payments, and standard accounting reports.
Some of those records name our clients and describe work we've billed them for. That information already lives in our accounting system. The application gives our own staff another way to work with it.
What we store
Two things are stored on company-controlled machines:
- Application credentials. The client ID and secret issued to us by Intuit.
- Access tokens. The OAuth tokens that let the application talk to QuickBooks on our behalf.
Both are kept outside version control and are readable only by the staff who operate the tool. Accounting data isn't copied into a separate database. The application reads from and writes to QuickBooks directly.
What we don't do
We don't sell any of this data. We don't share it with advertisers, data brokers, or analytics providers. We don't use it to train machine learning models. No third party receives QuickBooks data through this application.
How long we keep things
Access tokens stay valid until they're revoked or expire. Intuit expires an unused refresh token after 100 days. We can disconnect the application at any time from the QuickBooks apps page, which invalidates its access immediately.
Accounting records are retained inside QuickBooks under our normal record-keeping practice, which this application doesn't change.
Security
Credentials live in files excluded from version control and are never committed to a repository. If a secret is exposed, we rotate it in the Intuit developer dashboard, which invalidates every existing token at once. Access to the machines that run the tool is limited to authorized staff.
We haven't sought a third-party security certification for this application. It's an internal tool, and we'd rather describe what we actually do than imply an audit that hasn't happened.
Children
The application isn't directed at children and isn't accessible to anyone outside our company.
Changes
If we change how the application handles data, we'll update this page and change the date at the top.
Contact
Questions about this policy go to admin@isotrp.com.
Isotropic Solutions, Inc. 5604 Trailhead Ln SE Prior Lake, MN 55372 United States