Privacy Policy

Strategic Finance CFO Reporting · Strategic Finance LLC · Effective 2026-08-31

This Privacy Policy explains how Strategic Finance LLC ("we," "us," or "our") handles information in connection with Strategic Finance CFO Reporting (the "Application"), a private financial-reporting tool used by our fractional CFO practice to prepare weekly key-performance-indicator ("KPI") reports and a 13-week cash forecast for our clients. The Application is not offered to the general public and is not listed in any app marketplace.

1. Information We Access

When a client authorizes the Application through Intuit's OAuth 2.0 flow, we access that client's QuickBooks Online ("QBO") accounting data on a read-only basis under the com.intuit.quickbooks.accounting scope. Specifically, we read:

• Profit & Loss and Balance Sheet reports;
• Accounts Receivable and Accounts Payable aging;
• Bank and cash account balances;
• Deposit and payment transactions.

We request the minimum data necessary to produce the client's reports. We do not request the payments scope, and the Application contains no code paths that create, update, or delete data in a client's QuickBooks company. Our read-only commitment is enforced in software (GET requests only).

2. How We Use Information

We use the accessed data solely to generate the KPI and cash-forecast deliverables for the authorizing client. We do not use client financial data for advertising, and we do not sell, rent, or share it with third parties for their own purposes.

3. What We Retain

We retain only the derived aggregates needed for the client's reports (for example, computed KPI values and cash-forecast inputs). We do not build or retain a copy of the client's full general ledger. OAuth tokens are stored encrypted at rest.

4. Health-Related Data

Some clients operate in healthcare. The Application accesses financial and accounting data only; it does not access, ingest, or retain patient-level or protected health information ("PHI"). Reporting is performed at an aggregate financial level.

5. Security

• All communication with Intuit and QuickBooks Online uses TLS encryption in transit.
• OAuth access and refresh tokens are encrypted at rest and isolated per client company (realmId).
• Access to stored credentials is limited to the practice's secured application host.

6. Data Retention & Deletion

When a client relationship ends, or upon a client's request, we revoke the OAuth connection and delete the stored tokens and any cached financial pulls for that client. A client may revoke the Application's access at any time from within their QuickBooks Online account, which immediately prevents further data access.

7. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by an updated effective date on this page.

8. Contact

Questions about this Policy or your data may be directed to:
Strategic Finance LLC · Charleston, South Carolina, USA
Email: tom@strategicfinance.llc