Effective: 22 September 2026
Controller: WorksBien Studios Inc., 350 Bay Street, Suite 1300B, Toronto, Ontario M5H 2S6, Canada
Contact: info@worksbienstudios.com
This policy explains how WorksBien Studios Inc. processes information when you use the Deposit Exception Checker (the “Service”).
Account and identity information. Intuit may provide a stable account identifier, name, email address, and email-verification status. We also process organization membership, role, session, security, and subscription-entitlement information.
QuickBooks company information. With your authorization, the Service reads CompanyInfo, active Accounts, Invoices, Payments, and Deposits, including transaction identifiers, dates, amounts, currencies, customer references, payment applications, deposit links, reference numbers, payment methods, and the Undeposited Funds account identifier. The Service is limited to United States and Canadian companies with supported USD or CAD records. Records in unsupported currencies may be represented as coverage gaps rather than analyzed.
Derived control information. The Service creates completed-run manifests, hashes, rule results, exception findings, severity, affected amounts, source record identifiers, workflow states, resolution notes, exports, and audit events. Raw QuickBooks response bodies are processed transiently for a scan and are not stored as completed-run datasets.
Technical information. We process session tokens in hashed form, encrypted OAuth access and refresh tokens, timestamps, stable error codes, service health, and limited security logs. We design production logs not to contain OAuth codes, tokens, raw accounting responses, findings, exports, or customer names.
Support information. If you contact us, we process your email address, message, and attachments you choose to send. Do not send credentials, OAuth tokens, full accounting exports, payment-card data, or unnecessary personal information.
We process information to authenticate users; connect and disconnect authorized QuickBooks companies; perform requested read-only controls; display, preserve, and export evidence; manage organization access; prevent fraud and abuse; maintain security and availability; provide support; comply with law; and establish or defend legal claims.
Depending on location and context, processing is necessary to perform our contract, pursue legitimate interests in delivering and securing the Service, comply with legal duties, or act on consent. You may withdraw QuickBooks authorization by disconnecting the company, without affecting earlier lawful processing.
We disclose information only to infrastructure, database, security, communications, and payment service providers that help operate the Service; to Intuit as necessary for OAuth and QuickBooks API access; to professional advisers under confidentiality; in a corporate transaction subject to appropriate safeguards; or when required by law. We do not sell or rent QuickBooks data or use it for advertising.
Intuit processes information under its own privacy notices. Your organization controls the accounting information it makes available and remains responsible for having authority to connect the company and process its records.
QuickBooks tokens are encrypted with authenticated encryption and tenant-specific context. Customer data is separated by organization and workspace, and database row-level security is enforced for tenant records. Sessions use secure, HTTP-only cookies in production. Data may be processed in Canada, the United States, or other locations used by contracted providers, with safeguards required by applicable law.
No system is perfectly secure. Keep Intuit and Service credentials confidential, use authorized devices, and promptly disconnect access you no longer need.
We retain account, organization, completed-run, finding, and audit information while the organization uses the Service. After a verified deletion request or the end of the service relationship, customer-controlled Service data is scheduled for deletion within 30 days unless a longer period is required for security, dispute, tax, accounting, or legal obligations. Backups age out under the applicable backup cycle. Disconnecting a company revokes and deletes its stored OAuth token material but does not automatically delete completed control evidence; use the deletion process for that.
An organization owner can disconnect QuickBooks from the Service. You may request access, correction, export, restriction, objection, or deletion as applicable by emailing info@worksbienstudios.com. We may verify identity and organizational authority before acting. You may also complain to the privacy regulator in your jurisdiction.
The Service is for business users and is not directed to children.
We may update this policy as the Service, law, or providers change. We will publish the effective date and provide additional notice when required.