Effective date: 2026-05-03
Last updated: 2026-05-03
1. Who this policy covers
This privacy policy describes how Darling Design Presence, a trade name of The Farm at Catawissa Creek, located in Catawissa, Pennsylvania, handles data accessed through the DDP Data Pull application (“the app”). References to “we,” “us,” and “our” mean this entity. References to “you” and “your” mean the QuickBooks Online merchant or merchant-authorized user who connects the app to a QuickBooks Online company.
Contact for privacy questions or data deletion requests:
- Phone: 858-254-5902
- Email: david@darlingdesignpresence.com
2. What data we access
When you authorize DDP Data Pull through Intuit’s OAuth 2.0 consent flow, the app accesses data within the QuickBooks Online company you selected. The specific data categories depend on the OAuth scopes you approve, but typically include:
- Company profile information (legal name, address, fiscal year settings)
- Chart of accounts
- Customers, vendors, and employees (names, contact details, balances)
- Invoices, bills, payments, credit memos, and journal entries
- Items and services (catalog and pricing)
- Reports data (profit and loss, balance sheet, cash flow, accounts receivable / payable aging)
- OAuth access tokens and refresh tokens issued by Intuit for your authorization
We do not access:
- Your QuickBooks Online password or login credentials
- Data from QuickBooks Online companies you did not explicitly authorize
- Personal financial accounts that are not connected to the authorized QuickBooks Online company
3. Why we access it
We access this data solely to perform the work agreed to in your separate consulting engagement with us. Typical work products include:
- Monthly financial statement preparation and review
- Budget-versus-actual variance analysis
- Cash flow forecasting and reporting
- Accounts receivable / payable aging reports
- Period-over-period and year-over-year comparison analyses
- Custom reports requested as part of your engagement scope
We do not access your data for any purpose outside the scope of the engagement.
4. How we store it
Transient processing. Most data accessed through the app is processed transiently — pulled from QuickBooks Online, used to generate a report or analysis, and not retained beyond that processing run.
Retained data. Where data must be retained beyond a single processing run (for example, to compute period-over-period comparisons or to maintain an audit trail of work delivered), it is stored on encrypted storage controlled by Darling Design Presence. Storage is located on infrastructure within the United States.
OAuth tokens. Access and refresh tokens issued by Intuit are stored encrypted at rest. They are never logged in plain text, never committed to version control, and never transmitted outside our systems. Tokens are scoped to the specific QuickBooks Online company you authorized and cannot be used to access other companies.
Encryption in transit. All data transmission between our systems and Intuit’s QuickBooks Online APIs uses TLS 1.2 or higher.
5. Who else sees it
No one outside Darling Design Presence. We do not sell, rent, lease, share, trade, or otherwise disclose your data to any third party. The data is accessed only by Darling Design Presence personnel directly assigned to your engagement, and only for the purpose of delivering the work agreed to in that engagement.
We do not use third-party analytics, advertising, marketing, or data-broker services that have access to your QuickBooks Online data.
6. AI and machine learning
We do not use your data to train AI models. Your QuickBooks Online data — in whole, in part, in aggregate, anonymized, derived, or transformed — is not used to train, fine-tune, evaluate, benchmark, or otherwise develop any artificial intelligence or machine learning model, whether ours or a third party’s.
Some of our internal report-drafting workflows make use of large language model tools. Where such tools are used in the course of your engagement, the data sent to them is the minimum necessary to produce the requested output, is sent to providers under enterprise terms that prohibit training on submitted data, and is never sent to consumer-tier or free-tier AI services.
7. How long we keep it
When your consulting engagement with us ends, we will delete your QuickBooks Online data — including all stored copies, derived reports containing raw transaction data, and OAuth tokens — within thirty (30) days of the engagement termination date.
Upon written request from you at any time during the engagement, we will delete any specific data set you identify within thirty (30) days of the request.
We may retain summary work products (final delivered reports, signed engagement documents, and invoicing records) for the period required by applicable tax and business records law. These retained records do not contain raw QuickBooks Online transaction data.
8. Your rights
You have the right to:
- Know what data we access. Contact us using the details in Section 1 and we will provide a description of the QuickBooks Online data scopes the app is currently authorized to access.
- Revoke access at any time. Open QuickBooks Online → Apps → My Apps → DDP Data Pull → Disconnect. Revocation immediately stops the app from accessing your QuickBooks Online company.
- Request deletion. Contact us in writing. We will delete the requested data within thirty (30) days, except where retention is required by law (see Section 7).
- Request a copy. Contact us in writing and we will provide a copy of any retained data we hold related to your engagement.
If you are a California resident, a resident of a U.S. state with a comprehensive privacy law (Virginia, Colorado, Connecticut, Utah, and others), or a resident of a jurisdiction outside the United States with applicable privacy law, additional rights may apply. We will honor those rights as required by law on receipt of a verifiable request.
9. Children’s data
DDP Data Pull is a business-to-business tool. It is not directed to children under thirteen and we do not knowingly collect data from children.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated to active engagement clients in writing before they take effect. The “Last updated” date at the top of this document reflects the most recent revision.
11. Contact
Questions, deletion requests, copy requests, or any other privacy concern should be directed to:
Darling Design Presence
Catawissa, PA
858-254-5902
david@darlingdesignpresence.com
