This Privacy Policy describes how B&P Trading Company LLC (“BP Trading Co.,” “we,” “us,” or “our”) collects, uses, and shares information when you visit bptradingco.com(the “Site”), use the private BP Trading Co Finance Assistant (the “Finance Assistant”), or otherwise interact with us. The Finance Assistant connects to QuickBooks Online only when an authorized company administrator grants access through Intuit’s OAuth authorization flow.
Information we collect
We may collect the following types of information:
- Information you provide. When you contact us by email or through forms on the Site, we collect the information you choose to share, such as your name, email address, company, and the contents of your message.
- QuickBooks Online information. When an authorized administrator connects a QuickBooks Online company, the Finance Assistant may access company details, chart-of-accounts information, customers and vendors, transactions, invoices, bills, and financial reports that are available through the QuickBooks Online Accounting API. We access only the connected company and only for the purposes described below.
- Connection information.We process the connected QuickBooks company identifier and OAuth access and refresh tokens needed to maintain the authorized connection. We do not receive or store an administrator’s Intuit password.
- Usage information. We may automatically collect standard technical information such as your IP address, browser type, device information, and pages visited, through cookies and similar technologies.
How we use information
We use the information we collect to:
- Respond to enquiries and provide our services;
- Operate, maintain, and improve the Site;
- Provide internal financial reporting, reconciliation support, and operational analysis for the connected QuickBooks company;
- Authenticate API requests, maintain the authorized connection, prevent unauthorized access, and troubleshoot errors;
- Understand how visitors use the Site through analytics; and
- Comply with legal obligations.
We do not use QuickBooks information for advertising, sell it, or combine one QuickBooks customer’s information with another customer’s data.
Cookies and analytics
The Site may use cookies and third-party analytics tools to understand usage and improve performance. You can control cookies through your browser settings. Disabling cookies may affect some functionality of the Site.
How we share information
We do not sell personal or QuickBooks information. We limit QuickBooks information to authorized BP Trading Co. personnel who need it for the purposes described above. We may share information with Intuit as needed to operate the authorized connection, with service providers that help us secure and operate company systems under appropriate confidentiality obligations, and when required by law or necessary to protect our rights.
Security and credential storage
We use access controls, least-privilege authorization, encrypted transport, and credential isolation to protect QuickBooks information. OAuth client credentials, the connected-company identifier, and refresh tokens are kept in an approved secure credential store and are not committed to source code. Short-lived access tokens are held only as needed to make authorized API requests. When Intuit rotates a refresh token, the replacement is stored before it is used for later requests.
Data retention
We retain personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. QuickBooks connection credentials are kept only while the connection remains authorized. Reports or exports created by an authorized user follow BP Trading Co.’s applicable financial, security, and record-retention policies.
Disconnecting QuickBooks and deletion requests
An authorized administrator may disconnect the Finance Assistant through Intuit or revoke its credentials using BP Trading Co.’s controlled tooling. Revocation removes the locally stored refresh token and prevents further API access. To ask about access, correction, or deletion of information associated with the Finance Assistant, contact us using the details below.
Your rights
Depending on your location, you may have rights regarding your personal information, including the right to access, correct, or delete it. To exercise these rights, contact us using the details below.
Children’s privacy
The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.
Contact us
If you have questions about this Privacy Policy, contact us at support@bptradingco.com.