Scope
KEHMP Invoice Automation is an internal business application for authorized KEHMP LLC personnel. This policy applies to information processed through the application and its QuickBooks Online connection.
Information we process
- Account information, including name, email address, role, and authentication records.
- QuickBooks company identifiers, customer and project names, product and service records, and synchronization timestamps.
- Invoice workbook data, including customer, service date, purchase order, description, employee, quantity, rate, amount, and validation results.
- Employee rate settings, customer rate rules, invoice creation results, and operational audit events.
- OAuth access and refresh tokens used to maintain an authorized QuickBooks connection. These tokens are encrypted before storage.
Uploaded workbooks are parsed to create structured import records. The application does not retain the original workbook file after processing.
How we use information
We use information to authenticate authorized users, synchronize permitted QuickBooks data, generate and validate invoice workbooks, create approved invoices, prevent duplicate submissions, maintain audit history, secure the service, and provide support.
We do not sell personal information or use application data for advertising.
QuickBooks data and authorization
The application accesses QuickBooks Online only after an authorized administrator grants permission through Intuit OAuth 2.0. Access is limited to the QuickBooks Online Accounting scope. An administrator may disconnect QuickBooks from the application, which revokes the OAuth token and stops future API access. Disconnecting does not remove invoices already created in QuickBooks or records that KEHMP LLC must retain for accounting, security, or legal purposes.
Service providers and disclosure
We use Intuit for QuickBooks Online services, Supabase for authentication and database services, and Vercel for application hosting. These providers process information as needed to deliver their services. We may also disclose information when required by law, to protect rights or security, or in connection with a business reorganization.
Security and retention
We use access controls, encrypted transport, row-level database security, encrypted OAuth token storage, and audit records to protect information. No security measure can guarantee absolute protection. We retain information as reasonably necessary to operate the application and satisfy accounting, audit, security, and legal obligations, then delete or de-identify it when it is no longer needed.
Your choices
Authorized users may request access to, correction of, or deletion of their personal information by contacting us. Some records may need to be retained where required for accounting, security, or legal purposes. QuickBooks data may also be managed directly in the connected QuickBooks company.
U.S. processing and children
The application is operated in the United States and is intended only for authorized business users. It is not directed to children under 13, and we do not knowingly collect information from children.
Changes and contact
We may update this policy as the application or legal requirements change. The effective date above identifies the current version. Questions or privacy requests may be sent to kehmpllc@gmail.com.