Privacy Policy
1. Scope
This policy explains how Atlas Finance (the “App”), an internal application of C Systems USA LLC, doing business as “C Systems” (“C Systems”, “we”), handles data. The App is used only by C Systems and by the staff and accountants it invites. It is not offered to the public or to other companies.
2. Data the App handles
- QuickBooks Online data: C Systems’ own accounting records from its own QuickBooks company, such as accounts, classes, vendors, customers, items, transactions, journal entries and accounting reports. The App connects through Intuit’s OAuth sign-in with the Accounting scope only. It does not use payments features.
- C Systems’ own financial data: bank, card and Bill.com transactions and bills, used to keep the books in sync. Bank and card accounts are identified by their last four digits.
- User accounts: for each invited user, their name, e-mail address, role, passkey public credential and private-network login name, plus a record of sign-ins and changes in the App’s audit log.
The App uses one session cookie to keep you signed in. It uses no advertising, analytics or tracking.
3. How data is used
Data is used only to run C Systems’ own bookkeeping, budgeting and reporting, and to keep the App secure.
4. Sharing
Data is not sold, not shared with third parties and not used for advertising. It stays with C Systems, except for what is exchanged with the service providers C Systems already uses to run its finances: Intuit (QuickBooks Online), its bank-data provider and Bill.com. Automated categorization runs on C Systems’ own server; data is not sent to outside AI services.
5. Storage and security
- Data is stored on a server operated by C Systems. The App is reachable only over C Systems’ private network, not the public internet.
- Access is limited to invited users, who sign in with passkeys. Each user’s role limits what they can see and do.
- Data is encrypted in transit (TLS). QuickBooks access tokens are stored encrypted, and backups are encrypted.
- An audit log records sign-ins and changes.
6. Retention and deletion
Data is kept as long as C Systems needs it for its bookkeeping and records. Backups are rotated on a fixed schedule, and older backups are deleted automatically. When a user’s access ends, their account is disabled and their sessions are ended.
Disconnecting QuickBooks. The App’s Owner can disconnect QuickBooks in the App. The App then stops using QuickBooks at once: its access token and any pending QuickBooks authorization are deleted immediately, and its refresh token is revoked with Intuit and then deleted from C Systems’ server by the App’s next sync run.
If the App is disconnected from within QuickBooks, Intuit ends the App’s access at that moment and the stored token no longer works. The Owner then deletes the stored tokens and any pending authorization from C Systems’ server in the App.
Each disconnect is recorded in the App’s audit log. Disconnecting does not delete anything in QuickBooks: C Systems’ accounting records stay there, including records the App created. Other data in the App is kept as described above.
7. Security contact
To report a security concern or ask about this policy, e-mail support@cwcx.com.
8. Changes
C Systems may update this policy. The effective date above shows the current version. See also the End-User License Agreement.