Privacy Policy

Effective date: September 15, 2026

A&M Financial, LLC, operating under the public brands A&M Financial and A&M Accounting ("A&M," "we," "us," or "our"), provides accounting and financial-management services. This Privacy Policy explains how our internal QuickBooks integration (the "Integration") accesses, uses, stores, shares, and protects information obtained from Intuit QuickBooks Online.

The Integration is a private business tool. It is not offered for general public use. It may be used only by authorized A&M personnel and only in connection with companies that have authorized A&M and the Integration to access their QuickBooks Online data.

1. Information We Access

After an authorized user connects a QuickBooks Online company, the Integration may access accounting and business information made available through the Intuit QuickBooks Online API, including:

- Company identity and profile information;
- Chart of accounts and account balances;
- Financial statements and reports, including profit-and-loss and balance-sheet reports;
- Customers, vendors, classes, locations, products, and services;
- Transactions and related accounting records; and
- OAuth authorization information needed to maintain the connection, including the QuickBooks company identifier and access/refresh credentials.

The specific information accessed depends on the accounting services being provided. The Integration is not intended to access Intuit Payments, payroll, tax-filing, or other premium data unless A&M separately enables and authorizes that functionality.

2. How We Use Information

We use QuickBooks information only to:

- Provide authorized bookkeeping, accounting, reporting, analysis, and financial-management services;
- Verify the identity of the connected QuickBooks company;
- Identify accounting exceptions and prepare recommendations;
- Maintain and secure the authorized connection;
- Troubleshoot, audit, and improve the Integration; and
- Meet legal, regulatory, professional, and contractual obligations.

The Integration is initially operated in a locally enforced read-only mode. Any future change to accounting records requires a separate, documented approval process identifying the affected company and the specific proposed work.

We do not sell QuickBooks information or use it for interest-based advertising.

3. How We Share Information

We may disclose information:

- To authorized A&M personnel who need it to provide services;
- To service providers that host, secure, monitor, or support the Integration, subject to appropriate confidentiality and security obligations;
- To the client company, its authorized representatives, or its professional advisers as directed or permitted;
- When required by law, subpoena, court order, professional obligation, or governmental request; or
- When reasonably necessary to protect rights, safety, systems, clients, or the public.

We do not disclose one client company's QuickBooks information to another client.

4. Data Storage and Security

We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards include credential separation, access controls, encryption in transit, protected token storage, company-specific authorization records, audit logging that avoids sensitive payloads, and restrictions on write operations.

No system is completely secure, and we cannot guarantee absolute security.

5. Data Retention and Deletion

We retain QuickBooks-derived information only for as long as reasonably necessary to provide services and meet legal, regulatory, professional, contractual, security, backup, and record-retention requirements.

OAuth credentials are retained while the connection remains authorized. When a connection is revoked or no longer needed, we disable access and delete or render unusable the stored OAuth credentials, subject to limited backup, security, and legal-retention requirements.

A client or authorized representative may request disconnection or deletion by contacting us using the information below. We may need to verify the requester's identity and authority. Some accounting records may need to be retained where required by law, professional standards, contract, or legitimate business obligations.

6. Disconnecting QuickBooks

An authorized user may ask A&M to disconnect a QuickBooks company through the Integration's disconnect process or by contacting us. A user may also manage connected applications from within Intuit where that functionality is available. Disconnecting stops future API access but does not automatically delete records that A&M must retain lawfully or professionally.

7. Children's Privacy

The Integration is intended for business accounting use and is not directed to children under 13. We do not knowingly collect children's personal information through the Integration.

8. Changes to This Policy

We may update this Privacy Policy to reflect changes in the Integration, our practices, or applicable requirements. We will post the revised policy at this URL and update its effective date.

9. Contact Us

Questions, privacy requests, deletion requests, or disconnection requests may be sent to:

A&M Financial / A&M Accounting
Legal entity: A&M Financial, LLC
Email: am@amfinancialcpa.com
Website: https://www.amfinancialaccounting.com