Privacy Policy
Who we are
Mercury 28 LLC is a Texas limited liability company (“Mercury 28,” “we,” “us”). Mercury 28 Books (the “App”) is a private, internal application that we use to keep our own books in QuickBooks Online. It is not offered to consumers or to other businesses.
What the App accesses
When Mercury 28 connects its own QuickBooks Online company, the App can read and write accounting data in that company through the QuickBooks Online Accounting API (the com.intuit.quickbooks.accounting permission). That includes the chart of accounts, vendors, customers, and transactions such as expenses, deposits, sales receipts and journal entries. The App does not process payment cards and does not access any other QuickBooks company.
What we store
- The sign-in tokens Intuit issues to the App (an access token and a refresh token), and the ID and name of the connected company.
- A log of the App’s API calls: time, type of call, result and Intuit’s transaction ID. The log never contains passwords or tokens.
The bookkeeping records the App creates live in QuickBooks itself.
How we use it
We use this information only to record and reconcile Mercury 28’s own purchases, sales and expenses. We do not sell it, use it for advertising, or share it, except with the service providers needed to run the App: Intuit (QuickBooks), Cloudflare (network and website delivery), Anthropic (the AI assistant described below) and our cloud server provider.
AI assistant
Mercury 28 uses an AI assistant (Claude, from Anthropic) to help prepare and submit bookkeeping entries. When it is used, the entry details we send to QuickBooks, and the confirmations QuickBooks sends back, are processed by Anthropic to operate the assistant, under Anthropic’s terms. Sign-in tokens stay on our server and are never sent to the assistant. Mercury 28 does not use QuickBooks data to train AI models.
Security
Sign-in tokens are encrypted and kept in files that only the App’s server account can read. Connections to the App and to QuickBooks use HTTPS, and access to the App requires sign-in and is limited to people we authorize.
Retention and deletion
We keep the tokens while the App is connected. When the App is disconnected, we revoke the tokens at Intuit and delete them. We keep the API log as long as needed for troubleshooting and bookkeeping audit, and we will delete it on request.
Your choices
You can disconnect the App at any time; see How to disconnect. To ask a question or request deletion, email privacy@mercury28llc.com.
Children
The App is not directed to children, and we do not knowingly collect information from them.
Changes
If we change this policy, we will post the updated version here and change the effective date above.
Contact
Mercury 28 LLC · privacy@mercury28llc.com