QuickBooks Estate / privacy
Privacy Policy
Last updated October 15, 2026
Scope and operator
Haught Enterprises operates Aphelion QuickBooks Estate for authorized internal business workflows. This policy covers the integration and its public documentation pages. It does not replace the policies of Intuit or other service providers.
Information processed
Depending on the authorized request and granted permissions, the integration may process company and account identifiers, accounting records, transactions, reports, and personal information contained in those records. OAuth credentials and tokens are used to authenticate the connection. Users should request and disclose only the information needed for their assigned work.
Purpose and access
Information is used to perform authorized internal accounting, reporting and administrative tasks, maintain the connection, and support security, continuity and recovery. Access is restricted to authorized people, agents and configured service providers needed for those workflows. The integration is not offered as a public data service.
Service providers and AI
Intuit provides QuickBooks and its APIs. Proton Pass holds credential custody copies; scoped runtime copies support the connection. Cloudflare hosts these public pages. Authorized agent workflows may send requested information to the AI and infrastructure providers configured by the operator. Processing location, retention and use of information depend on the configured providers and their applicable service terms and policies.
Security
Credentials are kept out of these public pages and source-control records. Access controls and protected credential storage are used for the integration. No transmission, storage system or access control can guarantee absolute security.
Retention and deletion
Business records, authorized workflow records and recovery copies may remain in their respective systems and backups as needed for business, security and applicable retention obligations. Revoking QuickBooks access stops future authorized API access but does not automatically erase copies already retained. Contact the company administrator to request access review, correction or deletion; the administrator must assess the relevant systems and retention obligations.
Public page visitors
These pages contain no forms, advertising scripts or analytics scripts, and do not ask visitors to enter financial records or credentials. Cloudflare and the hosting infrastructure may process routine request and security information, including network addresses, requested URLs, timestamps and browser information. Do not put secrets in page URLs.
Contact and updates
Authorized users should contact the Haught Enterprises owner or designated company administrator through their established business contact channel for privacy questions or requests. Updates will be posted here with a revised update date.