Privacy Policy
InvoiceImport is a private, internal application operated by Solanko Consulting, Inc. It is used only by Solanko, and only against Solanko’s own QuickBooks Online company. It has no other users and collects no information from members of the public.
What the application accesses
The application connects to the QuickBooks Online API under the Accounting scope only. It does not request access to payroll, payments, or banking data.
| Record type | Access | Purpose |
|---|---|---|
| Customer | Read | Resolve the customer a draft invoice belongs to |
| Product / Service | Read | Resolve the service item used on invoice lines |
| Invoice | Create and update | Record invoice line items prepared by Solanko |
What is stored
No QuickBooks Online data is retained. Customer and product records are read at the moment of use, held only in memory for the duration of a single run, and discarded. Invoice content originates in Solanko’s own records and is sent to QuickBooks; it is not copied back or accumulated.
Credentials
OAuth client credentials and refresh tokens are encrypted at rest using Fernet (AES-128-CBC with HMAC-SHA256 authentication). The encryption key is held separately from the encrypted data, on private network-attached storage with an offsite copy in AWS Secrets Manager. Credentials are never written to source code, log files, command-line arguments, or version control.
Transmission
All communication with Intuit is over HTTPS/TLS, using Intuit’s official SDKs. The application runs locally on a single operator workstation. It exposes no public endpoint, accepts no inbound network connections, and operates no server.
Sharing
No data is shared with, sold to, or disclosed to any third party. There are no analytics, advertising, tracking, or profiling components.
Sending
The application never emails or otherwise transmits an invoice. Invoices are created as drafts for a person to review and send from within QuickBooks Online.
Disconnection
Access may be revoked at any time from within QuickBooks Online by disconnecting the application, which invalidates its tokens immediately. As no QuickBooks data is retained, disconnection leaves no residual copy.
Changes
Material changes to this policy will be published on this page with a revised effective date.
Contact
Solanko Consulting, Inc., 8 The Green, Suite G, Dover, DE 19901, United States.
jk@solanko.net
Part of Solanko Consulting’s Terms of Use and Privacy Policy.