Privacy Policy

Effective July 14, 2026

Via Nations operates Via Team Finance, an internal integration that connects authorized QuickBooks Online information to controlled finance reporting, reconciliation, and analysis workflows. This policy explains the information the integration accesses, why it is used, and the choices available to authorized users.

Information we access

After an authorized user connects a QuickBooks Online company, the integration may access accounting information made available through the permissions granted in Intuit’s authorization process. Depending on the finance function being performed, this can include company information, chart-of-accounts records, classes, reports, and transaction-related accounting records.

The integration receives OAuth access and refresh tokens from Intuit. It does not ask for or store an Intuit password.

How we use information

We use QuickBooks information only for authorized Via Nations business purposes, including internal financial reporting, reconciliation, data-quality review, audit support, and analysis. We do not sell QuickBooks information or use it for third-party advertising.

Disclosure and service providers

Access is limited to authorized Via Nations personnel. Cloudflare provides hosting for the public site and OAuth return endpoint as described below. Other service providers, if used, are limited to the information needed to support the integration. We do not share one connected QuickBooks company's information with another customer or connected company. Information may also be disclosed when required by law or necessary to protect rights, security, or the integrity of Via Nations systems.

Cloudflare hosts this public website and its OAuth return endpoint. The return endpoint receives a short-lived authorization response from Intuit, immediately redirects the browser away from the query-string response, and does not persist the response in this website's page storage. Cloudflare may process request metadata through its global network as part of hosting and security operations. Via Nations application code does not intentionally log OAuth authorization codes, returned state values, or callback URLs. The approved administrator transfers the response to the controlled United States-based local integration for state validation and token exchange.

Security

Via Nations uses administrative and technical safeguards intended to protect credentials and finance information. OAuth credentials and QuickBooks data are not stored in this public website. No method of storage or transmission is completely secure, but access is restricted according to business need.

Retention and deletion

OAuth tokens are retained while the connection remains authorized or until they expire, are replaced, or are revoked. QuickBooks-derived information is retained only as long as reasonably needed for an authorized business, accounting, audit, legal, or recordkeeping purpose. When no longer required, it is deleted, securely disposed of, or de-identified as appropriate.

Authorized users may request disconnection or deletion review by emailing kelton.hays@vianations.org. Requests may be subject to legal, accounting, audit, or record-retention obligations.

Your choices

An authorized QuickBooks administrator may disconnect the integration through QuickBooks Online. You may also use our disconnect and reconnect guidance or contact us for assistance.

Changes to this policy

We may update this policy as the integration or applicable requirements change. The effective date above identifies the current version.

Contact

Questions about this policy or the integration’s data practices may be sent to kelton.hays@vianations.org.