Ollie Books ("Ollie Books", "we", "us") is a connector that plugs Claude directly into QuickBooks Online via the Model Context Protocol (MCP), so you can ask questions about your books in plain English and get live answers. This policy explains what data we access, what little we store, and how we protect it. The short version: your financial data passes through at the moment you ask a question — we never store it.
1. What we access from QuickBooks
When you connect a QuickBooks Online company, we request read access to the QuickBooks Online Accounting API using the com.intuit.quickbooks.accounting scope. Under that scope, Ollie Books reads only the data needed to answer the questions you ask, including:
- Company information — your company name and basic settings, used to label your connection and scope requests to the right books.
- Profit & Loss report data — income, expenses, and net income figures for the date ranges you ask about.
- Invoice and customer data — invoices, balances, and customer records needed to answer questions like "who owes me money?"
We do not write to, modify, or delete anything in your QuickBooks account.
2. How your QuickBooks data is used
Ollie Books is a live pass-through. When you (or your Claude session, acting on your behalf) ask a question, the relevant data is fetched from QuickBooks at that moment, returned directly to your own AI session to produce the answer, and discarded. Your books stay in QuickBooks.
For each request, we log metadata only — which tool was called, when, and whether it succeeded or failed — so your workspace has an audit trail and we can debug problems. The financial numbers themselves are not stored, cached, or retained by Ollie Books.
3. What we store (and what we don't)
We store only what's needed to run your account:
- Account data — your email address and a hash of your password (we never store the password itself).
- Connection credentials — OAuth access and refresh tokens for the QuickBooks companies you connect, AES-encrypted at rest. We never receive or store your Intuit password.
- Workspace data — your workspace and connected company names.
- Audit metadata — the MCP request log described above (tool name, timestamp, success/failure).
We do not store your financial data — no reports, no transactions, no invoices, no customer balances.
4. What we never do with your data
- We never sell your data — to anyone, for any purpose.
- We never share your QuickBooks data with third parties, except as strictly required to deliver the answer you asked for (see sub-processors below).
- Your data is never used to train or improve AI or machine learning models — ours or anyone else's.
- We do not allow humans to read your QuickBooks data except (a) with your explicit consent, (b) as needed for security or to comply with law.
5. Sub-processors
We share data with these third parties only as required to operate the service:
- Convex — database and serverless backend hosting (account data, encrypted tokens, audit metadata).
- Vercel — application hosting and edge delivery.
- Anthropic — when you connect your Ollie Books MCP URL to Claude, your questions (and the QuickBooks data Ollie Books returns to Claude) flow through Anthropic to generate responses. Anthropic's privacy policy applies to that interaction.
6. Data retention & deletion
- You can disconnect QuickBooks at any time from your Ollie Books dashboard; we immediately revoke and delete the stored OAuth tokens.
- You can also revoke Ollie Books's access at any time from your Intuit account settings, independently of us.
- You can delete your account at any time, which revokes and deletes your OAuth tokens and permanently removes your data within 30 days.
- Audit metadata is retained for up to 3 years.
7. Security
- OAuth tokens are AES-encrypted at rest.
- Passwords are stored only as salted hashes.
- All data transfer uses TLS 1.2+.
- We follow least-privilege access controls internally; no member of our team has direct production database access without a signed access request and audit trail.
8. Cookies & analytics
We use standard web analytics (page views, referrers) on the Ollie Books marketing site to understand how people find and use the site. We do not use advertising trackers, and analytics never touch your QuickBooks data.
9. Your rights
Depending on your jurisdiction (PIPEDA, GDPR, CCPA, etc.) you may have the right to access, correct, export, or delete the personal data we hold about you. Email [email protected] and we'll respond within 30 days.
10. Children
Ollie Books is not directed to children under 13 (or under 16 in the EEA) and we do not knowingly collect data from them.
11. Changes to this policy
We'll update this page when our practices change and revise the "Last updated" date at the top. For material changes, we'll notify active accounts by email at least 30 days before the change takes effect.
12. Contact
Questions? Email [email protected] or write to Ollie Books, c/o Bryce Choquer, Canada.
See also our Terms of Service.