QuickBooks Data Use Addendum

1. Scope

This QuickBooks Data Use Addendum ("Addendum") supplements the CrewCommand Terms of Service and Privacy Policy and applies specifically to the use of QuickBooks Online ("QB Online") in connection with CrewCommand's Service. This Addendum is required by Intuit, Inc., and governs how CrewCommand ("we," "us," "our," or "Company") accesses, processes, and stores data from your QB Online account.

2. Purpose of QB Online Integration

CrewCommand integrates with QB Online to enable the following functionalities:

• Syncing customer information from CrewCommand to your QB Online company
• Creating sales receipts (invoices) in QB Online based on jobs and work completed in CrewCommand
• Tracking invoice status and payment history for integration with your QB accounting records

We access QB Online data only for these specified purposes. We do not use QB Online data for any other reason.

3. QB Online Data Accessed

When you connect your QB Online account to CrewCommand, we may access and process the following information:

• QB Realm ID (your company identifier)
• Customer names and contact information
• Invoice and sales receipt details (amounts, line items, dates)
• Customer classification and account types

We do not access sensitive QB data such as banking credentials, payment methods, employee data, or internal QB preferences without explicit authorization.

4. QB Data Storage & Token Management

CrewCommand securely stores QB Online authentication tokens in an encrypted database:

• Access Token: Used to make API calls to QB Online. Expires after 24 hours of inactivity and is automatically refreshed.
• Refresh Token: Used to obtain new access tokens. Stored encrypted and never exposed to end users.
• Realm ID: Your QB company identifier, stored for sync operations.

Important: We store tokens only as necessary to perform the sync operations. We do not store, cache, or process QB company data beyond what is necessary to execute the specific sync operations authorized by you. QB data is not backed up or retained beyond the scope of the active integration.

5. Data Deletion Upon Disconnection

When you disconnect your QB Online account from CrewCommand (either through CrewCommand settings or by revoking access in QB Online), we immediately:

• Delete all stored QB authentication tokens (access and refresh tokens)
• Stop all syncing of QB data
• Retain only the record of your disconnection date for audit purposes

Any customer or invoice data previously synced to QB Online remains in your QB Online company and is subject to QB Online's own data retention policies. We do not delete data from QB Online on your behalf.

6. No Redistribution or Commercial Use

You expressly grant us permission to access QB Online data solely for the purpose of providing the CrewCommand Service to you. We agree and represent that:

• QB data will not be sold, licensed, or shared with third parties
• QB data will not be used for commercial purposes beyond providing the Service to you
• QB data will not be combined with other datasets or used for analytics, marketing, or any other purpose
• QB data is processed solely as a service provider on your behalf

7. User Authorization & Representation

By connecting your QB Online account to CrewCommand, you represent and warrant that:

• You are the authorized administrator of the QB Online company account
• You have the legal right to authorize CrewCommand to access the QB Online account
• You own or are authorized to make decisions on behalf of the business entity associated with the QB Online account
• The connection complies with your QB Online subscription terms and any user agreements with Intuit

You are responsible for maintaining the security of your QB Online credentials and for managing access permissions in your QB Online account. If you believe your account has been compromised, you should immediately change your QB Online password and revoke the CrewCommand access token in your QB Online settings.

8. Compliance with Intuit Terms of Service

Your use of the QB Online integration is also governed by:

• Intuit's Terms of Service for QB Online
• Intuit's Third-Party Providers Policy
• Intuit's API Terms of Service
• Any data use or privacy agreements established between you and Intuit

In the event of any conflict between this Addendum and Intuit's terms, Intuit's terms shall prevail with respect to QB Online data.

9. Security & Data Protection

We implement industry-standard security measures to protect QB data:

• All QB tokens are encrypted at rest using AES-256 encryption
• All communication with QB Online APIs uses HTTPS/TLS encryption in transit
• Access to QB tokens is restricted to authorized system components only
• QB data is not logged, except for error diagnostics, which are also encrypted
• We conduct regular security audits and penetration testing

10. Technical Support & Troubleshooting

If you experience issues with the QB Online integration, CrewCommand support may request diagnostic information. We will never request your QB Online password or ask you to share QB Online credentials directly. Any troubleshooting is conducted through the OAuth-authenticated connection only.

11. Data Breach Notification

In the event of any unauthorized access, loss, or disclosure of QB data stored by CrewCommand, we will:

• Notify you without undue delay (within 48 hours when possible)
• Provide details about the breach, affected data, and remediation steps taken
• Notify Intuit as required by law and Intuit's policies

12. Contact for QB Data Concerns

If you have any concerns about how CrewCommand handles QB Online data, or if you wish to request information about data stored on your behalf, please contact:

CrewCommand Support
Email: support@crewcommand.app

For concerns specific to Intuit or QB Online, you may also contact Intuit directly.

13. Changes to This Addendum

This Addendum may be updated from time to time to reflect changes in CrewCommand's QB integration or to comply with Intuit's requirements. Material changes will be communicated via email or in-app notification. Your continued use of the QB Online integration constitutes acceptance of the updated Addendum.

14. Acknowledgment

By clicking "Connect to QuickBooks" and authorizing the CrewCommand OAuth app to access your QB Online account, you acknowledge that you have read, understood, and agree to be bound by this QuickBooks Data Use Addendum in addition to the CrewCommand Terms of Service and Privacy Policy.