Overview
This Privacy Policy explains how SunkissedLogic Inc. (“we,” “us,” or “our”) collects, uses, discloses, and protects information when you use Archivist (also called Archivist for QBO), its website, application, and related support (collectively, the “Services”).
Archivist is a focused backup utility. At your request, it connects to a QuickBooks Online company, creates a portable archive of supported company data, and makes that archive available to you for a limited time. It does not provide accounting, bookkeeping, restore, collaboration, or permanent document-storage services.
If you do not agree with this Privacy Policy, do not use the Services.
Information We Collect
Intuit identity and account information
When you sign in with Intuit, we receive and process information needed to authenticate you, including:
- a stable Intuit user identifier
- your verified email address
- authentication transaction and session information
- security information needed to prevent forgery, replay, and cross-browser misuse
Archivist requests the OpenID, email, and QuickBooks accounting scopes. It does not request Intuit profile, address, phone, payment, or payroll scopes merely to operate the backup workflow.
QuickBooks Online connection and company information
When you authorize a company, we receive and process:
- the QuickBooks company identifier and company name
- OAuth access and refresh credentials
- supported accounting records and related metadata
- reports requested for the backup format
- attachment metadata and available attachment files
- backup progress, record counts, warning counts, file size, and expiration information
QuickBooks data may include business and financial records, customers, vendors, employees, accounts, transactions, documents, and personal information contained in those records. The exact contents depend on what exists in your QuickBooks Online company and what the supported export catalog includes.
Website, device, and operational information
When you visit or use the Services, our systems may receive limited technical information such as:
- IP address and general network information
- browser, device, and operating-system details
- request timestamps, routes, response status categories, and security events
- internal connection and backup identifiers, phases, counts, durations, and non-sensitive error categories
- communications you send to support
Application logs are designed not to contain QuickBooks payloads, company names, company identifiers, attachment names or contents, OAuth credentials, authorization headers, cookies, or provider response bodies.
How We Use Information
We use information to:
- authenticate you and maintain a secure session
- connect or reconnect a QuickBooks Online company at your direction
- fetch supported company data and create the backup you request
- show backup progress and make a completed archive available for your authorized download
- revoke QuickBooks authorization and delete company-scoped data when you disconnect
- secure, operate, troubleshoot, and maintain the Services
- respond to support and privacy requests
- comply with law and enforce our Terms of Service
We do not sell personal information. We do not use QuickBooks data for advertising, cross-customer aggregation, analytics, AI or machine-learning processing, or unrelated product development.
Cookies and Browser Storage
Archivist uses essential, secure cookies to maintain your authenticated session, protect OAuth transactions, and prevent cross-site request forgery. Disabling these cookies may prevent the application from working.
The application does not place QuickBooks data, OAuth tokens, company identifiers, or company names in browser local storage or session storage. The public website does not use advertising cookies.
How We Share Information
We disclose information only as needed for the following purposes.
Intuit and QuickBooks Online
We exchange authentication, authorization, and API information with Intuit to sign you in, connect the company you select, fetch data for your requested backup, refresh authorization when necessary, and revoke authorization when you disconnect. Your use of Intuit and QuickBooks Online is also governed by Intuit’s terms and privacy practices.
Infrastructure service providers
Service providers may process limited information on our behalf when they provide hosting, databases, encrypted object storage, networking, security, or operational logging. They may process information only for their assigned service role and subject to appropriate contractual or operational restrictions.
We do not send QuickBooks data to analytics, advertising, AI, customer-support, or third-party file-destination services.
Legal, safety, and business transfers
We may disclose information if reasonably necessary to comply with law or legal process; investigate fraud, abuse, or a security incident; protect the rights, property, or safety of us, our users, or others; or support a merger, acquisition, financing, reorganization, or sale of assets. Where permitted, we will limit the disclosure to what is necessary.
Data Retention and Deletion
Completed backup archives are retained for 24 hours by default and then deleted. A deployment may use a different retention period, but it must remain finite and positive. The application displays the applicable expiration time for a completed backup.
While a company remains connected, we retain the encrypted authorization credentials, encrypted company identifier and name, backup history, and operational metadata needed to provide the Services. Temporary files and failed partial archives are deleted after failure or cleanup.
When you disconnect a company, Archivist deletes that company’s stored backup files, backup history, OAuth transactions, and connection data, and asks Intuit to revoke future access. If Intuit is temporarily unavailable, we may retain only a minimal encrypted revocation credential and retry metadata until revocation finishes; it does not retain the company name, company identifier, backup history, or archive metadata.
Files you already downloaded are outside our custody and are not deleted when you disconnect. Limited security and operational logs may be retained as reasonably necessary to protect the Services, investigate incidents, and comply with law, but they are designed to exclude QuickBooks content and credentials.
Security
We use administrative, technical, and organizational safeguards designed to protect information, including:
- encryption in transit
- row-bound authenticated encryption for OAuth credentials, company identifiers, and company names at rest
- authenticated encryption for temporary files and completed archives at rest
- authenticated, owner-authorized downloads rather than public links
- expiring, single-use, browser-bound OAuth transactions
- secure sessions, anti-CSRF protection, access controls, and bounded requests
- automatic cleanup of expired and incomplete backup files
- operational logging and error handling designed to exclude QuickBooks data and credentials
No transmission or storage system is perfectly secure, and we cannot guarantee absolute security. Downloaded archives contain your accounting data. You are responsible for storing and sharing your downloaded files securely.
International Processing
The Services and their providers may process information in the United States and other places where we or our service providers operate. Data-protection laws in those locations may differ from those where you live.
Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of certain personal information, or to object to or restrict certain processing.
You can disconnect a QuickBooks Online company within the application to revoke future access and delete its stored company data and backup files. You can also sign out to end the current application session. To make another privacy or account request, email [email protected]. We may need to verify your identity before completing a request.
Children’s Privacy
The Services are intended for adults and business use. We do not knowingly market to or knowingly collect personal information directly from children under 18.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and may provide additional notice when appropriate.
Contact Us
If you have questions about this Privacy Policy or want to submit a privacy request, contact us at:
SunkissedLogic Inc.
30 N Gould St Ste N
Sheridan, WY 82801
United States
Email: [email protected]