Privacy Policy

Last updated: June 9, 2026

Ashford Sky CPA LLC ("we", "us", or "our") operates the QBO Close Platform (the "App"), a private internal application used by our firm to review client accounting data in QuickBooks Online. This Privacy Policy explains how we handle data accessed through the App.

1. Who this App is for

The App is a private, internal tool used solely by authorized staff of Ashford Sky CPA LLC. It is not offered to the public and is not available for general download or marketplace distribution.

2. Data we access

Through Intuit's authorized OAuth connection, the App reads accounting and reporting data from QuickBooks Online companies that our firm is already authorized to access, including:

Company information (CompanyInfo)
Trial Balance
Profit and Loss
Balance Sheet
Chart of Accounts and related report data

The App is read-only. It does not create, modify, delete, void, post, or submit any transactions or records to QuickBooks Online.

3. How we use the data

Accounting data is used only to support our firm's month-end close review and related professional accounting services for the client to whom the data belongs. Data is reviewed internally by authorized firm staff and may be processed by AI-assisted workflows to help summarize findings and draft review questions.

4. AI processing

The App may pass accounting data to generative AI services solely to assist firm staff with review and analysis. Client QuickBooks data is not used to train any AI model.

5. How we store and protect data

OAuth refresh tokens are encrypted at rest using AES-256-GCM.
Access tokens are short-lived and are never written to logs.
Client ID and client secret are stored as secure environment secrets, never hardcoded or exposed in the browser.
Access to the App requires authentication through Microsoft (Azure AD / Entra ID).
All API activity is recorded in an internal audit log.

6. Data sharing

We do not sell client data. We do not share a client's QuickBooks data with any third party other than service providers strictly necessary to operate the App (such as our hosting and AI processing providers), and only as needed to provide accounting services to that client.

7. Data retention and disconnection

A client's connection can be disconnected at any time, either from within QuickBooks Online or from within the App. When a connection is disconnected, the associated OAuth tokens are revoked and the App can no longer access that company's data.

8. Contact

For questions about this Privacy Policy or how we handle data, contact us at support@ashfordsky.com.