1. Scope and responsibility
This policy covers Office (Don Books), BSD Office RO, and Office data accessed through Timbernet. Donald G. Wiklund operates this private business system. Each participating business remains responsible for the records it provides and for authorizing access on its behalf. This policy does not replace the separate privacy policies of Intuit, BioTrack, or other connected services.
2. Information we receive
Account information includes your name, email, sign-in identity, assigned role, access permissions, and account/security activity. We receive business information from authorized users, uploaded documents, designated email or scanning workflows, and approved provider connections.
Business records may contain invoices, receipts, payments, expenses, tax amounts, ledger information, property and contractor details, customer and vendor contact information, and supporting documents. BioTrack supplies authorized inventory and operational records.
When connected, BSD Office RO receives QuickBooks company information, accounts, customer/vendor/item records, accounting transactions, and financial reports. The current collection is scoped to 2026 accounting activity, related reference records, and subsequent changes to retained records. Source responses, dates, hashes, revisions, and deletion markers support traceability. A source response can include fields beyond those displayed in an Office summary.
We also maintain connection state, authorization tokens in the protected connector, synchronization receipts, and limited operational diagnostics. Our connector does not ask for or store your Intuit password; authorization takes place with Intuit.
3. How we use information
We use information to provide bookkeeping views, preserve evidence, compare sources, answer authorized questions, classify records, manage access, diagnose errors, and support business accounting and recordkeeping obligations. QuickBooks reads supplement Office and do not cause the connector to write accounting transactions back to QuickBooks.
We do not sell QuickBooks or Office business data or disclose it for targeted advertising. We do not use QuickBooks data to train general-purpose AI models.
4. Access, service providers, and AI
Records are available to the owner, users with the relevant business permissions, and authorized service clients. Access is not limited to the QuickBooks administrator who connected the company; that administrator must be authorized to permit this internal business use.
We use owner-controlled servers and supporting providers, including Vercel for web hosting, Convex for application data and updates, and Clerk for identity and sign-in. Connected providers receive the requests needed to operate their integrations. Support personnel may access information as needed to administer and troubleshoot the service.
Authorized Office and Timbernet workflows may send relevant documents, record excerpts, prompts, and context to AI services, including OpenAI, for extraction, classification, or requested answers. Those services process the information under their applicable service terms and privacy policies. The QuickBooks connector does not provide its Intuit credentials to AI clients. Only use a connected AI client with data you are authorized to disclose to that client.
Information may also be disclosed to authorized professional advisers or where required by law. Service providers may process information in the United States and other locations where they operate.
5. Security and sign-in technologies
Office uses authenticated access, role and resource restrictions, protected connector credentials, and encrypted network connections. Original evidence and processing receipts help identify changes and avoid duplicate processing. No system can guarantee absolute security.
Sign-in cookies and browser storage support authentication, session security, and application preferences. Identity and hosting providers may process technical information such as IP addresses, browser information, and request logs to operate and protect the service.
6. Retention and disconnecting
We retain business evidence, source history, and processing receipts for as long as needed for the authorized business purpose, accounting or tax obligations, security, and dispute resolution. Retention depends on the record and the participating business’s obligations; there is no single automatic deletion period for all records. Backups may retain copies until they expire under the applicable backup process.
Disconnecting QuickBooks stops future collection and removes the connector’s local provider tokens. It does not automatically delete previously imported records, historical evidence, or backups. Deletion or correction requests are handled separately, subject to the rights of other people, recordkeeping requirements, and any applicable legal holds.
7. Your choices and requests
Ask the Office operator for access, a copy, correction, deletion, or restriction of your information, or to end an authorized connection. We may need to verify your identity and authority over business records before acting. Where applicable law provides additional privacy rights, you may exercise those rights without discrimination and contact us to review an unresolved request.
Contact land@exploretimberon.com with “Office privacy” in the subject. Identify the business and request without including passwords, tokens, or sensitive documents in the initial message. Office is intended for authorized business users and is not directed to children.
8. Policy changes
We will update the effective date when this policy changes and provide notice through Office or direct communication for material changes before they take effect. Required consent will be requested when applicable.