Privacy policy

qb2odoo is operated by Nicholas Kosinski at https://sorryquickbooks.com. It is an internal tool used by Odoo staff and partners to move a company's accounting from QuickBooks into Odoo.

What we access

• QuickBooks Online, after a user connects a company with Intuit's sign-in: read-only access (scope com.intuit.quickbooks.accounting) to the chart of accounts, customers, vendors, employees' names, products and services, tax codes, terms, classes, locations, transactions and accounting reports. qb2odoo never creates, changes or deletes anything in QuickBooks.
• QuickBooks Desktop, through Intuit's QuickBooks Web Connector or an uploaded QBXML export: the same lists and transactions, read-only.
• Odoo: the address, database name and API key of the Odoo database the user chooses as the destination.
• Users of qb2odoo: name, e-mail address, a hash of the password, sign-in times and IP addresses (in the audit log).

Why

Only to migrate the company's books into the Odoo database the user chose, to check that Odoo matches QuickBooks, and to undo the migration if asked. The data is not sold, shared with advertisers, used for marketing, or used to train models.

Where it is kept and how it is protected

• On the server that runs this installation, operated by Nicholas Kosinski. Traffic is encrypted with HTTPS.
• QuickBooks access tokens, the Intuit client secret and Odoo API keys are encrypted at rest (AES with HMAC, Fernet). Passwords are stored only as scrypt hashes.
• Each migration is visible only to the user who created it, the people they share it with, and administrators of the installation.
• Sign-ins, QuickBooks connections, loads, undos and downloads are recorded in an audit log.

How long

The copy of the QuickBooks data and any uploaded or generated files are deleted as soon as the migration is marked complete, or earlier when a user deletes the migration or an administrator purges it. QuickBooks Online access is revoked at the same time. A record of which Odoo records the migration created is kept with the migration (it contains no QuickBooks data) so the migration can still be undone; it is deleted with the migration.

Disconnecting and deletion

A user can disconnect QuickBooks Online at any time from the migration's Source step, or from QuickBooks (Settings → Apps). Disconnecting revokes and deletes the stored tokens. To have a migration and its data deleted, ask its owner or write to nko@odoo.com.

Contact

Questions about this policy or a privacy request: nko@odoo.com. Security issues: nko@odoo.com.