DAOS QuickBooks Integration Privacy Policy

Effective date: November 7, 2026.

Scope and operator

District Analyst, LLC operates the District Analyst Operating System (DAOS) and its private Agent Command Center. This policy describes how the DAOS QuickBooks integration handles information from an authorized QuickBooks Online company. It applies to this integration and its accounting-report view.

The integration is intended for District Analyst's internal business operations and approved users. It is not a public service for connecting unrelated customers' accounting companies.

Information processed

When an authorized administrator connects a QuickBooks company, the integration processes its company name, company identifier, authorization credentials, and connection status. Access and refresh tokens allow the integration to request data without receiving or storing the user's Intuit password.

When an authorized user requests an import, the integration retrieves accounting reports: profit and loss, balance sheet, receivables aging, and payables aging. Depending on the report contents, this may include account names, financial amounts, customer or vendor names, report line items, currency, accounting basis, reporting dates, and generation timestamps.

The Command Center also processes the signed-in user's identity and internal authorization role. Connection and import operations create audit metadata. Troubleshooting records contain limited operation/status information and provider correlation identifiers where available. Application logs are designed to exclude passwords, authorization codes, access and refresh tokens, and financial-report bodies.

Purposes and limits

The integration uses this information to authenticate the authorized connection, retrieve requested accounting reports, display financial information to approved users, retain dated snapshots, maintain access controls, and investigate connection failures.

The connector is implemented for read requests. It does not create invoices, post journals, modify or delete QuickBooks accounting entries, move money, or approve payments. The accounting permission displayed by Intuit may describe broader API capabilities than the features implemented by DAOS.

QuickBooks remains the accounting record. DAOS report snapshots support operational analysis. They do not establish that the books have been reconciled, convert forecasts into recognized revenue, or replace an accountant's review.

AI and reporting boundaries

This connector does not send QuickBooks report snapshots to the Command Center's AI chat, use those reports to train or fine-tune models, or export those reports to Google Sheets. Other Command Center functions are outside this policy's scope and may have their own data flows.

This integration does not sell or rent QuickBooks information, provide it to advertisers, or pool it across unrelated customer accounts.

Access and service providers

Access is restricted by the existing private Command Center audience and internal owner/administrator permissions. Access is for District Analyst's authorized business purposes.

The application uses ChatGPT Sites and its Cloudflare runtime for hosting and request processing, and Supabase for the existing operational database. These services process information as needed to operate the integration, subject to the applicable service arrangements. Their processing locations and infrastructure are governed by their services; this policy does not promise a particular data-residency boundary.

Information may also be disclosed where District Analyst is legally required to do so or must protect its systems and legal rights, subject to applicable law.

Security and retention

Tokens are encrypted before private database storage. Runtime secrets are kept out of browser code and source files. Report access uses the application's authenticated, authorized server path. These measures reduce risk but do not constitute a promise that any system is free of security incidents.

The integration retains accounting snapshots and audit history for internal reporting and continuity. It currently has no automatic snapshot-expiration schedule. Retention and removal requests must be reviewed by an authorized District Analyst representative against applicable business and legal requirements.

Disconnecting and requesting removal

An authorized user can disconnect QuickBooks in the Command Center or manage the connection through Intuit. Disconnecting stops future imports and requests revocation of the connection. If the provider cannot complete revocation immediately, imports are disabled while revocation remains pending. Encrypted credentials are retained for retrying revocation until it succeeds.

Disconnecting does not automatically erase previously retained reports or audit history. Authorized representatives may request review, correction, or removal by contacting the address below. Identity and authority will be verified before action. Any applicable provider-backup lifecycle and mandatory retention obligations must also be considered.

Contact and changes

Contact info@districtanalyst.com, District Analyst, LLC, 1717 K Street NW, Suite 900, Washington, DC 20006. Do not email passwords, tokens, or financial reports with a support request.

Changes to this policy will be published with an updated effective date. Material changes in how information is used will be addressed before the changed use begins, including additional authorization where required.