XIP Books privacy notice

Scope and roles

Empyrean LLC publishes and operates this integration for organizations that run XIP. It applies only to data accessed from a QuickBooks Online company that an authorized administrator of that organization selects and connects. It does not cover any organization's public website, the separate Google integrations, the EVI EIP Books integration, or Intuit's own data practices.

Data and purpose

The connection uses QuickBooks Online Accounting authorization only. It reads company identification and preferences, chart-of-accounts entries, customers, products and services, invoices, and profit and loss, balance sheet, general-ledger and trial-balance reports. These records can contain customer names, invoice details, transaction dates, amounts and other business-financial details. The purpose is the connected organization's internal reporting, project financials, invoicing support and reconciliation.

Creating customers, invoices or journal entries happens only after an authorized person at the connected organization approves each record, and each is read back to confirm it. The QuickBooks Payments and Payroll scopes are not used. Payment execution, payroll, bank-feed changes and tax filing are outside this integration.

Handling and sharing

Intuit authenticates the QuickBooks user. The integration keeps a company identifier and OAuth credentials to maintain the connection; it never receives the user's QuickBooks password. Client secrets and refresh tokens are stored encrypted in a key vault and are never written to logs, source code or this website. Access is limited to the connected organization's authorized staff and approved operators acting for it.

Selected accounting data may be processed by the organization's XIP instance and, when an authorized user requests an assistant workflow, by the chosen assistant provider to produce the requested analysis. QuickBooks data is not sold, shared with other organizations, or used for advertising. Each organization's data stays in its own XIP instance.

Retention and disconnection

Connection credentials are kept only while the connection is authorized and needed. Business records and derived reports may be retained for the organization's legitimate accounting and legal-record purposes; disconnecting the app does not automatically delete reports already created. An authorized administrator can disconnect the application in QuickBooks at any time. The operator then revokes or removes the connection credentials under its control and handles retained data under that organization's recordkeeping obligations.

To request access, correction, disconnection or deletion of retained integration data, contact jacob.jones@empyreanconsulting.com without sending passwords or sensitive exports. We will verify authority and explain any records that must be kept.

Changes and contact

Material changes in data categories, purposes or write capabilities are reviewed and this notice is updated before use. Questions: Empyrean LLC, jacob.jones@empyreanconsulting.com.