Privacy Policy
Effective date: May 20, 2026
Operator: Bootstrap AI ("Bootstrap AI," "we," "us"), operated by Andy Jordan, Cache Valley, Utah, USA.
This Privacy Policy describes how Bootstrap AI collects, uses, stores, and shares information when you use the BSAI Bookkeeper application (the "Application").
1. What we access
When you authorize the Application via Intuit's OAuth flow, we receive access to your QuickBooks Online company data. We read and, with your explicit per-action approval, modify the following:
- Transactions: expense, purchase, bank feed, and check transactions, including amounts, dates, vendor references, and account classifications.
- Bills and bill payments: vendor bills (Accounts Payable) and the payments applied to them.
- Vendors and accounts: the vendor list and the chart of accounts.
- Attachments: files (e.g., receipt images, invoices, statements) attached to transactions in your QBO company.
The Application also reads from a Google Drive folder you designate, in order to intake receipt files. It does not access any Drive content outside that folder.
2. What we collect, store, and where
Bootstrap AI does not operate a central server. The Application is self-hosted on the operator's local machine. Specifically:
- OAuth tokens are stored locally on the operator's machine in a file called
tokens.json, gitignored. Tokens are not transmitted to any third party other than Intuit for token refresh.
- Receipt images that pass through the Application are downloaded transiently from your Drive intake folder to local working directories during processing and are deleted after a successful QBO attachment.
- Snapshots of reconciliation results (matched, unclear, missing) are saved locally per entity (e.g.,
state/lh/last-reconcile.json) for the operator's own audit and continuity.
- No data is collected for advertising, sold, or shared with any third party beyond the third-party processors named in Section 3.
3. Third-party services
The Application sends data to the following third-party services strictly to deliver functionality. Each service has its own terms and privacy policies:
The Application does not transmit data to any other third party.
4. How long we keep your data
- OAuth tokens persist on the local machine until you disconnect the Application from your QBO company, at which point the operator manually deletes the local
tokens.json.
- Reconciliation snapshots persist on the local machine indefinitely as part of the operator's bookkeeping records, unless deleted.
- Receipt images in transit are deleted from the local working directory after a successful attachment, or kept temporarily for retry if attachment failed.
- The Application does not maintain any cloud-based storage of your data.
5. Your rights and how to disconnect
You may disconnect the Application at any time:
- Sign in to QuickBooks Online.
- Navigate to Apps → Connected Apps.
- Find BSAI Bookkeeper and click Disconnect.
Disconnection takes effect immediately on Intuit's side. The operator deletes the local tokens.json on the next Application run, which renders any cached token unusable.
You may also contact the operator directly to request deletion of any locally stored records related to your company. See Section 8 for contact details.
6. Security
The Application runs on the operator's local machine, which is protected by full-disk encryption (FileVault on macOS). OAuth tokens are stored in a gitignored file outside of any source-controlled directory. The Application does not expose any network listening service; OAuth callbacks are handled via a single-use local web server bound to localhost only.
7. Children
The Application is not directed at and is not intended for use by children under 16. We do not knowingly collect personal information from children.
8. Contact
Questions about this Privacy Policy or about your data should be directed to:
Bootstrap AI
Andy Jordan
andy@bootstrapai.biz
9. Changes to this Policy
Bootstrap AI may revise this Privacy Policy from time to time. The current version will always be available at the URL where you accessed this Policy, with an updated "Effective date" above. Material changes will be communicated to authorized users via the contact email on file with their QBO connection.