QMax Service Mesh (“the Application”), operated by Visionary Technology (“we”) for QMax Industries. Last updated: July 2026.
This policy explains how the Application handles data accessed from QuickBooks Online. The Application is a private, internal integration used only by authorized staff of QMax Industries; it is not offered to the public.
With QMax’s authorization, the Application accesses QuickBooks Online accounting data through Intuit’s Accounting API: customers, vendor bills, invoices, receivable and payable aging, and financial reports. It requests the QuickBooks Online Accounting scope only. It does not access the Payments API and does not process, move, or transfer funds.
Data is used solely to render internal operational views for QMax (cash-flow, KPI, and AP/AR workflows) and to prepare a limited set of write actions (vendor bills, bill-date corrections, and invoices) that a QMax staff member must explicitly approve before they are executed. Data is not used for advertising, profiling, or any purpose beyond QMax’s internal operations.
The Application does not maintain a copy of the QuickBooks ledger. Accounting data is read on demand to produce a view and is not warehoused. The only persisted records are pending approval “proposals” — the details of an action awaiting human approval — held in a managed PostgreSQL database encrypted at rest and retained only as needed for operational audit, then purged.
All data is transmitted over TLS. Access to the Application requires authentication against QMax’s Microsoft Entra identity provider, verified on every request. OAuth tokens are stored server-side in an encrypted secret store, are never exposed to end users or written to logs, and are rotated per Intuit’s token lifecycle. No write to QuickBooks occurs without an explicit, authenticated human approval bound to the approver’s identity.
We do not sell, rent, or share QuickBooks data with third parties. Data remains within the Application’s infrastructure operated on QMax’s behalf.
QMax may disconnect the Application from QuickBooks Online at any time from within QuickBooks or via the Application’s disconnect page, which revokes the Application’s access. Upon disconnection, no further data is accessed.
Questions about this policy: support@visionary.technology.