Minerva Cash Privacy Supplement

What we connect to

Minerva Cash connects to QuickBooks Online with your permission, using an OAuth connection that requests exactly one QuickBooks scope covering accounting data. We never ask for your QuickBooks username or password. You grant access on QuickBooks' own consent screen, and you can revoke it at any time, either directly in QuickBooks or from inside Gran Minerva.

What we read

We read exactly four record types from QuickBooks Online, and nothing else:

• Customer
• Invoice
• Payment
• Credit Memo

We read up to 24 months of history so our risk model has enough payment behavior to work from, then keep it current as new activity happens in your QuickBooks company.

How we protect it

Customer identifiers and customer names are tokenized before anything is durably stored, so the values our systems store and query are not the plain identifiers from your QuickBooks company. Your QuickBooks company ID is one deliberate exception: Intuit's API requires the literal company ID on every request we make on your behalf, so we store it in Google Secret Manager alongside your connection's access tokens, encrypted at rest and restricted by access controls to the service identities that run the integration and to our platform administrators. Outside that stored credential, your company ID is not kept in plain form: our application database holds only a one-way token derived from it, and our analytics data warehouse does not store it at all. The raw data QuickBooks sends us is never written to our database, logs, or error records. It exists only in memory for the moment it takes to process a sync, then it is gone. Stored data in our analytics data warehouse is encrypted at rest with customer-managed encryption keys; other systems that hold Cash data, including your connection credential, use Google Cloud's standard encryption at rest. Every system that can read this data is scoped narrowly to only the data it needs.

How long we keep it

We keep your QuickBooks-derived data for as long as your account is active, plus a limited window after you disconnect or cancel, so you can reconnect without starting over. Deletion after that window is not automatic today: if you want your data removed, ask us and a Gran Minerva admin completes the deletion and confirms once it is done. Disconnecting QuickBooks stops new data from arriving and revokes our access within minutes; it does not by itself erase what was already collected.

We do not sell your data

We do not sell your data, and we do not share it for advertising or with data brokers. Your QuickBooks-derived data is used only to run Minerva Cash for you. We use Google Cloud as our infrastructure subprocessor to host, store, and process this data; see our Subprocessors page for the complete list.

Your rights

You can disconnect QuickBooks at any time from inside Gran Minerva, or by revoking access directly in QuickBooks. You can also request a copy of what we have, or request deletion of your QuickBooks-derived data, by emailing privacy@granminerva.com. We will confirm once it is done.