Privacy Policy

Effective date: 2 October 2026 · Controller: Mario Barfus, Lauterach, Austria · mario@mamalisa.at

1. Data processed

Accounting data of the QuickBooks Online companies owned or controlled by the controller (Sahari Limited, Shubha Capital): reports (general ledger, profit and loss, balance sheet, transaction lists), chart of accounts, vendor and customer records, and change information, retrieved via the Intuit QuickBooks Online Accounting API with the read-only scope com.intuit.quickbooks.accounting. No data of other QuickBooks users is processed.

2. Purpose

Internal bookkeeping review and owner reporting, in particular detecting retroactive changes. Data is not sold, not shared with third parties, not used for advertising or profiling, and not used to train AI models.

3. Storage and security

• Data and OAuth tokens are stored on a privately operated server in Frankfurt, Germany (EU).
• OAuth tokens are stored encrypted and are accessible only to the collector process; they are never passed to an AI model or transmitted to third parties.
• The collector has read access only and no outbound connection other than to Intuit.
• Access to stored data is restricted to the controller. Encrypted backups are kept under the controller's control.

4. Processors

Hosting provider of the server (EU). When the controller reviews snapshots with an AI assistant, this happens on his explicit request and under his account; the assistant has no access to the OAuth tokens.

5. Retention and deletion

Snapshots are kept as long as needed for bookkeeping review and legal retention duties. On disconnect, tokens are revoked and deleted and no further data is retrieved; stored snapshots are deleted on request.

6. Your rights

Access, correction or deletion requests: mario@mamalisa.at