Privacy Policy
This Privacy Policy describes how Luca NextGen Financial ("Luca", "we", "us") handles information in the Luca QuickBooks Connector (the "Connector"), an internal service that lets authorized Luca staff read QuickBooks Online company data and prepare journal entries through Claude.
Who may use the Connector
Access is limited to Microsoft 365 accounts in Luca's Microsoft Entra tenant and to email domains Luca has approved. Each user signs in with Microsoft before any QuickBooks data is accessed.
Information we process
The Connector processes: (a) the signed-in user's name and email address from Microsoft; (b) QuickBooks Online OAuth tokens, stored encrypted with AES-GCM; (c) QuickBooks Online company and accounting data a user requests, such as customer lists, reports, and records; and (d) activity logs showing who ran which action, when, and against which company.
How we use it
We use this information only to provide the Connector: to answer user requests, to post journal entries after a user approves them, and to keep an audit trail and secure the service. We do not sell it, use it for advertising, or use it to train AI models.
Journal entries
Entries are posted to QuickBooks Online only after an authorized user approves a previewed entry.
Sharing
We share information only with Cloudflare (hosting), Intuit (QuickBooks Online access as the user requests), Microsoft (sign-in), and Anthropic (the Claude interface). We may disclose information where required by law.
Retention
Tokens are kept while a connection is active and deleted when the connection is disconnected. Activity logs are kept for 12 months.
Security
Data is encrypted in transit and tokens are encrypted at rest. Access is restricted to authorized Luca staff.
Contact
Questions about this policy go to tim@lucanextgen.com.