This policy describes how Dido Internet Inc. ("we", "us") handles information in connection with the internal software integration identified in the Intuit Developer portal as hermes (the "Integration"). The Integration is used only by our own company and our own authorized personnel. It is not offered, sold, or distributed to the public.
With the authorization of an administrator of our company's own QuickBooks Online subscription, the Integration may read the following from that company file:
The Integration does not access QuickBooks data belonging to any other company or any other Intuit customer. It does not create, modify, pay, void or delete transactions or accounting records unless an authorized person explicitly requests such a change, and does not perform payroll, tax filing or payment functions.
Our business purpose is limited to bookkeeping administration: identifying which card transactions are still awaiting supporting invoices or receipts, matching those documents to transactions, forwarding supporting documents to our document-capture service (Dext), and producing internal reports for our own accountant.
Data retrieved by the Integration is stored only on servers and workstations controlled by us, located in Canada and the United States, protected by operating-system access controls and encrypted transport (TLS). Authorization tokens are stored on our own infrastructure with restrictive file permissions and are not placed in shared or public systems.
We do not sell, rent, trade, or share information obtained through the Integration with third parties for advertising or any secondary purpose. Information is disclosed only:
Retrieved transaction data is retained only as long as needed for the bookkeeping purposes above and for our ordinary accounting-record retention obligations. Access can be revoked at any time by an administrator of our QuickBooks company (Apps → Manage apps → disconnect) or by removing the Integration's stored credentials on our servers, after which the Integration can no longer read the company file. You may request deletion of any data held by the Integration by contacting us at the address below.
Access is limited to authorized personnel on our own network. Credentials and tokens are stored locally with restricted permissions, transport is encrypted, and the Integration operates in read-only mode by default.
The Integration's own interfaces and this website use no advertising cookies, no third-party analytics, and no tracking pixels.
The Integration is an internal business tool and is not directed to children.
If this policy changes, the revised version will be published at this address with a new "last updated" date.
Dido Internet Inc.
Email: gilbert@didointernet.ca