Privacy Policy

Account data. When you sign up we collect your name, email address, and organization name through our authentication provider (Clerk).

QuickBooks Online data. If you connect a QuickBooks Online company, we access — with your explicit OAuth authorization — your company information, customers, and invoices (including amounts, due dates, balances, and payment status). We use the minimum scope QuickBooks offers for this purpose (com.intuit.quickbooks.accounting). We never see your QuickBooks password.

Billing data. Subscription payments are processed by Stripe. We store your subscription status and Stripe identifiers; your card number never touches our servers.

Usage and diagnostics. We collect standard request logs and error reports (via Sentry) to keep the service reliable.

We use your data for exactly one product purpose: helping your business get paid. Concretely, that means syncing your invoices and customers from QuickBooks, computing aging and collection metrics, and sending the payment-reminder emails you configure and approve.

We do not sell your data, do not use it for advertising, and do not use your accounting data to train AI models.

All traffic is encrypted in transit (TLS). QuickBooks OAuth tokens are encrypted at rest with AES-256 before being stored. Data lives in access-controlled databases scoped to your organization — users in one organization cannot access another organization’s data.

We share data only with the service providers required to run CashPilot: Vercel (hosting), Neon (database), Clerk (authentication), Stripe (billing), Resend (email delivery), Inngest (background jobs), Upstash (rate limiting), Sentry (error monitoring), and Intuit (QuickBooks API). Each receives only what it needs to perform its function.

You can disconnect your QuickBooks company at any time from Settings; doing so revokes our access and deletes the stored OAuth tokens. You can also revoke CashPilot’s access directly from your Intuit account.

You may delete your CashPilot account at any time from Settings. Account deletion removes your organization’s data — including synced QuickBooks data — from our production systems. Residual copies in encrypted backups expire on a rolling basis.

We retain your data for as long as your account is active. If your subscription lapses, we retain your data for a grace period so you can resume, after which it becomes eligible for deletion. Deletion requests are honored as described above.

CashPilot is a business tool and is not directed to children under 13. We do not knowingly collect personal information from children.

If we make material changes we will update the effective date above and notify active customers by email.

Privacy questions or deletion requests: support@appalachaistudios.com. See also our Terms of Service.