Privacy Policy

Itzdata Solutions — ITZ Organiser

Effective Date: 31 March 2026

This Privacy Policy describes how Itzdata Solutions ("Company", "we", "us", or "our") handles information when you use the ITZ Organiser application and its associated support utilities (collectively, the "Software").

1. Overview

ITZ Organiser is a self-hosted, internal-use business tool that integrates with QuickBooks Online (QBO) via Intuit's API. It is designed for use by a single organisation to manage its own accounting workflows. The Software includes support utilities such as the QBO Sandboxer, used for copying QBO data to sandbox environments for development and testing. We do not operate the Software as a hosted service, and we do not have access to your data.

2. Information We Access

When you connect the Software to your QuickBooks Online company, the Software accesses the following data through Intuit's API:

Data Read from QBO

Data Category	Examples	Purpose
Customer records	Customer names, contact details, balances	Invoice generation, client management
Vendor records	Vendor names, contact details	Expense tracking, bill creation
Invoices	Invoice line items, amounts, dates, payment status	Revenue tracking, client reporting
Items (Products & Services)	Item names, prices, descriptions, account mappings	Invoice line items, inventory lookup
Bills	Vendor bills, line items, amounts	Expense tracking
Purchases	Direct expenses, payment methods, line items	Expense categorisation
Chart of Accounts	Account names, types, balances	Transaction categorisation
Tax Codes & Tax Rates	Tax code names, rates, configurations	Tax calculations on invoices/expenses
Company Info	Company name, country, fiscal year start	Connectivity verification

Data Written to QBO

Data Category	Operations	Purpose
Bills	Create	Record vendor invoices
Purchases	Create	Record direct expenses
Attachments	Upload	Attach PDF invoices to bills/purchases

The Software does not read or access bank account credentials, payment card numbers, Social Security numbers, or other sensitive personal financial data.

3. Data Storage

Local Storage

All data accessed from QBO is stored locally on the machine where the Software is installed:

Database: A SQLite database file stores cached copies of QBO entities, workflow state, and audit logs.
OAuth tokens: Access tokens and refresh tokens are stored in the local database. Tokens are not transmitted to any external service other than Intuit's token endpoint for refresh purposes.
State files: Support utilities such as the QBO Sandboxer store ID mapping state in local JSON files.

No Cloud Storage or Transmission

We do not operate servers that receive, store, or process your data.
We do not transmit your QBO data to any third party.
We do not use analytics, telemetry, or tracking services.
The Software communicates only with Intuit's QBO API endpoints and your locally configured services (e.g., timesheet providers).

4. Data Retention

Cached QBO data is stored locally for as long as the Software is in use. There is no automatic deletion schedule.
OAuth tokens are refreshed automatically. Expired access tokens are replaced; refresh tokens persist until revoked.
You may delete all stored data at any time by removing the database file and state files from your machine.
Upon ceasing use of the Software, you should revoke your OAuth 2.0 authorisation through Intuit's App Centre and delete local data files.

5. Data Security

All communication with Intuit's API is conducted over HTTPS (TLS-encrypted connections).
OAuth 2.0 credentials are stored locally and are not shared with any external service.
API requests are logged locally for audit purposes; logs include request/response metadata.
The Software enforces QBO API rate limits (450 requests per minute) and concurrent request limits.
You are responsible for securing the machine, file system, and network environment where the Software operates, including restricting access to the database files containing OAuth tokens.

6. Third-Party Services

The Software integrates with the following third-party services:

Service	Data Shared	Purpose
Intuit QuickBooks Online	OAuth tokens, API queries and writes	Core accounting integration

No data is shared with advertising networks, analytics providers, data brokers, or any other third parties.

7. Data Subject Rights

Since the Software is self-hosted and all data is stored locally under your control:

Access: You have direct access to all stored data via the database file.
Deletion: You may delete all data by removing the database and state files.
Portability: Data is stored in standard formats (SQLite, JSON) that can be exported.
Revocation: You may revoke QBO access at any time through Intuit's App Centre at https://appcenter.intuit.com.

8. Children's Privacy

The Software is a business accounting tool and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be reflected by updating the effective date at the top of this document. Your continued use of the Software following any changes constitutes acceptance of the revised policy.

10. Contact

Itzdata Solutions
Email: itzdata@itzdata.com.au