Privacy Policy

One Cubed QuickBooks Online Integration

Effective date: May 9, 2026

1. Who we are

One Cubed Consulting ("One Cubed", "we") is a managed services provider based in Nanaimo, British Columbia, Canada. This Privacy Policy describes how the One Cubed private QuickBooks Online ("QBO") integration ("the Software") handles data.

2. What data the Software accesses

The Software connects to One Cubed's own QBO company ledger via Intuit's authorized OAuth 2.0 flow. It accesses only financial and operational data within that single company file — for example, profit and loss reports, invoices, customer records, expense categories, and chart of accounts — and only within the OAuth scopes granted by Intuit.

3. How the Software uses data

Data is used exclusively for One Cubed's internal accounting, reporting, and management operations. The Software:

does not transmit QBO data to any third party,
does not aggregate QBO data with data from any other organization,
does not sell, license, or share QBO data,
does not modify QBO data — access is read-only by design.

4. Where data is stored

Any locally cached responses or tokens are stored on infrastructure One Cubed owns and operates. OAuth refresh tokens are stored in an encrypted secrets vault. No QBO data is exported to consumer cloud services or shared storage outside One Cubed's direct control.

5. Who has access

Access to the Software and its locally cached data is restricted to the principal of One Cubed Consulting. The Software is single-tenant and not exposed to any external user.

6. Retention

Data is retained only as long as needed for active operations. OAuth grants can be revoked by the User in QBO at any time, after which the Software ceases all access and locally cached tokens are destroyed.

7. Security

OAuth tokens are stored encrypted at rest. The Software runs inside One Cubed's private network. The Software performs no automated outbound transmission of QBO data.

8. Your rights

As the sole authorized User and data subject, you may revoke OAuth access in QBO at any time, delete locally cached data on demand, or request information about data the Software has accessed.

9. Compliance

This policy is intended to comply with the Personal Information Protection Act (PIPA) of British Columbia and Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA), as applicable to data the Software processes.

10. Contact & data-subject requests

For privacy questions, requests to access, correct, or delete personal data, or any other data-subject inquiry, please use the contact form. Indicate "Privacy" in the subject line and we will respond within a reasonable timeframe.