Contact
AboutBenefitsBlogPhotosContact

QBO Internal Privacy Policy

Last updated
November 9, 2026

This Privacy Policy describes how Aera Systems LLC (“Aera,” “we,” “us”) handles information when authorized Aera personnel use our private internal application (the “Connector”) that connects to QuickBooks Online via Intuit’s APIs to support Aera’s own accounting, reconciliation, job-cost, and planning workflows.

The Connector is not offered to the public, is not listed on the QuickBooks App Store, and is intended for use with Aera’s own QuickBooks Online company only. This policy is separate from Aera’s website privacy policy, which covers website operations only.

Operator: Aera Systems LLC
Contact: privacy@aerasystems.co

1. Who the “user” is

For this private app, the relevant “user” / “customer” is Aera Systems LLC (the QuickBooks Online company that authorizes the Connector). The only authorized operator is Justin Koziol. The Connector is not a consumer product.

2. Information we access or process

When the authorized operator connects the Connector to Aera’s QuickBooks Online company, Intuit may grant access (subject to the OAuth scopes we request) to accounting data such as:

  • Chart of accounts, customers/jobs/projects, vendors, and items
  • Invoices, bills, payments, journal entries, and related transactions
  • Standard accounting reports available through the Accounting API

Intended application behavior is read-only. The OAuth Accounting grant from Intuit can be broader than reads; Aera’s adapted runtime is designed to expose only get/search/report-style tools. We do not intend the Connector to create, update, or delete QuickBooks Online records.

We also process:

  • OAuth credentials needed to keep the connection working (client identifiers, refresh tokens, realm/company identifiers)
  • Operational diagnostics such as error classes, timestamps, and Intuit correlation identifiers (intuit_tid) when available — not full financial payloads in logs

3. How we use the information

We use QuickBooks Online data solely to:

  • Support Aera’s internal financial reporting, budget vs actuals, cash-flow, job-cost, and related operational analysis
  • Reconcile QuickBooks Online posted amounts with Aera’s operating model and internal tools
  • Troubleshoot connection or API errors for the same internal purpose

We do not sell QuickBooks Online data. We do not use QuickBooks Online data to train or fine-tune machine-learning models under Aera’s intended configuration (Team account with Privacy Mode enabled for the operator AI workspace). Processing for the workflow may still involve Aera’s AI/bot platform and its subprocessors for inference / analysis, subject to those platforms’ terms, safety/abuse exceptions, and retention practices. That processing is for Aera’s benefit as the original QuickBooks Online company, not for other companies’ products.

4. Where information is processed and stored

Connection credentials are stored in an encrypted credential store controlled by Aera (AES-256-GCM envelope with a separately held key), on infrastructure Aera designates in the United States. Analysis may occur on Aera’s authorized operator tools, including Aera’s own assistant-run server. Exact hosting details for Intuit’s production checklist are maintained separately and must match the live deployment.

5. Sharing

We do not share Aera’s QuickBooks Online data with unrelated third parties for their own marketing or product training. Service providers that process data on Aera’s behalf to run the Connector or analysis workflow (for example hosting or AI platform providers under Aera’s account) may receive data as needed for that function, under applicable agreements. We do not list the Connector for other QuickBooks companies.

6. Retention and deletion

OAuth refresh credentials are retained only while the connection is authorized and needed for the internal workflow. When the connection is revoked or Justin Koziol directs deletion, Aera will clear the encrypted credential store and cease API use for that grant. Conversation logs, exported reports, and backups that may contain financial results follow Aera’s internal retention practices for financial records. Operators should avoid pasting unnecessary sensitive payroll or credential material into chats.

7. Security

Aera applies controls appropriate to an internal finance integration, including:

  • Encrypted at-rest storage of refresh credentials with a separate key file
  • Restricted operator access (limited to Justin Koziol)
  • Preference for HTTPS for any web pages associated with the app
  • Avoiding logging of credentials or full QuickBooks Online payloads in diagnostic streams

No method of transmission or storage is 100% secure. Report suspected incidents to privacy@aerasystems.co and Justin Koziol at jkoziol@aerasystems.co.

8. Your choices

The QuickBooks Online company administrator who authorized the Connector can disconnect it through QuickBooks / Intuit connection management. Aera also maintains an internal disconnect / revoke procedure. Questions: privacy@aerasystems.co.

9. Children’s privacy

The Connector is not directed at children and is not for consumer use.

10. Changes

We may update this policy when the Connector’s hosting, processors, or use changes. Material changes affecting Intuit production attestations should be reflected in the Developer Portal as needed.

11. Contact

Aera Systems LLC
privacy@aerasystems.co
Operator / support: Justin Koziol, jkoziol@aerasystems.co

AboutBenefitsBlogContact
Instagram link
Facebook link
LinkedIn link
YouTube link
Twitter link
© Copyright {auto update year} Aera Systems LLC
Privacy PolicyTerms & ConditionsWebsite by LUUM Studio