Effective September 2, 2026
This policy covers the QuickBooks Online integration (“the Integration”) operated by 40Two Group Inc. (“40Two”, “we”). The Integration is an internal tool: it connects only to 40Two’s own QuickBooks Online company and is used only by authorized 40Two staff. It is not offered to the public or to third parties.
What data the Integration accesses
With authorization from a 40Two QuickBooks administrator, the Integration reads accounting data from 40Two’s QuickBooks Online company through Intuit’s API, including company information, customers, vendors, products and services, transactions, and financial reports. It does not access QuickBooks Payments or payroll data.
How the data is used
The data is used solely for 40Two’s internal financial reporting and analysis. It is not sold, shared, or disclosed to any third party, and it is not used for advertising or profiling.
How the data is stored and protected
The Integration runs on servers 40Two controls, hosted in Canada. Intuit OAuth tokens are stored encrypted at rest. Access to the Integration requires sign-in with a 40Two Microsoft Entra ID account and is restricted to authorized staff. Accounting data is retrieved on demand and is not retained beyond what is needed to answer the request.
Revoking access
A 40Two QuickBooks administrator can revoke the Integration’s access at any time from the Apps section of QuickBooks Online, which immediately invalidates its tokens.
Contact
Questions about this policy: accounting@40two.ca.