Privacy Policy

Who this applies to

A business that subscribes to eFlowsIQ (a “company”) decides who may use it and what they record. For the business records a company keeps in eFlowsIQ, the company is responsible for that information and we process it on the company's behalf. This policy also covers the people who use eFlowsIQ for their company, and visitors to its public pages (for example a quote or lead-form link).

What we collect

• Account details: your name, work email, the companies you belong to and your role. Passwords are handled by our sign-in provider and are never visible to us.
• Business records the company enters or imports: customers, vendors, contacts, items, quotes, orders, receipts, stock, invoices, bills, payments, time entries, attachments and notes.
• QuickBooks Online data, when the company connects its QuickBooks company: the chart of accounts, classes, locations, terms, customers, vendors, open invoices and bills, payments and report figures, and the QuickBooks numbers of the documents eFlowsIQ sends there.
• Activity records: an audit trail of who changed what and when, and technical logs (such as errors) needed to run the service safely.

How we use QuickBooks data

eFlowsIQ connects to QuickBooks Online only when an authorised person at the company chooses Connect to QuickBooks and approves it at Intuit. We use the connection solely to provide the service to that company:

• to read the lists and figures above so screens and reports are up to date;
• to send the documents the company finishes in eFlowsIQ (invoices, credit memos, bills, vendor credits, bill payments and journal entries) to its own QuickBooks company.

We do not sell QuickBooks data, use it for advertising, or share it with other companies. The connection tokens are stored encrypted. A company can disconnect at any time from Finance → QuickBooks in eFlowsIQ or from its Intuit account; after that eFlowsIQ no longer reads from or writes to QuickBooks.

Why we use your information

• to provide and secure the service the company subscribes to;
• to send the emails the company asks for (quotes, invoices, statements, reminders);
• to keep an audit trail, investigate problems and prevent misuse;
• to meet legal obligations.

Who processes it for us

eFlowsIQ runs on trusted service providers that process data only on our instructions: Supabase (database, sign-in and file storage), Vercel (the website), Railway (background jobs such as QuickBooks sync and PDF printing), Google (sending email) and Intuit (when a company connects QuickBooks). Data may be stored and processed outside your country by these providers, under their security and privacy commitments.

How we protect it

Each company's records are kept apart by the database itself (row level security), so one company can never see another's. Connections are encrypted, QuickBooks tokens and sensitive identifiers (such as tax IDs) are encrypted at rest, access inside a company follows the roles its administrator sets, and every change is recorded in the audit log. The database is backed up daily.

How long we keep it

We keep a company's records while it subscribes. When a company leaves, we delete or return its records on request, except where the law requires us to keep them for longer. Backups roll over within a few days.

Your choices

You can see and correct your account details in eFlowsIQ. To access, export or delete other information, ask your company's administrator, or contact us and we will help within a reasonable time.

Contact

Questions about this policy or your information: your Accrualis account manager. We may update this policy; the date above shows the latest version. See also our Terms of Use.