# Connector Privacy Policy > What the Nocodetalks QuickBooks MCP connector reads, the little it keeps (encrypted tokens, a write log, read counts), and how to disconnect and delete. - **URL**: https://www.nocodetalks.co/quickbooks-mcp/privacy - **Site**: Nocodetalks, a one-person product studio that builds finance tools for US accounting firms, CFOs and fintech founders - **Contact**: ankur@nocodetalks.co - **Free 30-minute audit**: https://cal.com/nocodetalks/quick-catchup-30-min --- # Connector privacy policy. What Nocodetalks Books Connector reads, what it keeps, and what it never keeps. Last updated November 6, 2026. ## Who runs it Nocodetalks Books Connector (“the connector”) is run by Ankur Khandelwal, trading as Nocodetalks, a one-person studio in Bangalore, India. It links a QuickBooks Online company to AI apps such as Claude and ChatGPT through the Model Context Protocol (MCP). For anything about your data, email [ankur@nocodetalks.co](mailto:ankur@nocodetalks.co). This page covers the connector only. Browsing nocodetalks.co is covered by the [site privacy policy](https://www.nocodetalks.co/privacy). ## The short version - Your accounting data passes through the connector and is not stored. - The connector keeps only what it needs to sign you in, protect changes and enforce limits, listed below. - I don’t sell data, share it, use it for advertising, or use it to train AI models. ## What it can access When you connect, you sign in with Intuit and choose one QuickBooks Online company. Intuit then lets the connector use the QuickBooks Online Accounting API for that company, the permission called `com.intuit.quickbooks.accounting`. That includes reports, transactions, customers, vendors, employees, items, accounts and company settings. The connector reads only what your AI app asks for in a conversation you start, and writes only changes you have previewed and approved. Your Intuit password never reaches the connector: you type it on Intuit’s own sign-in page. ## What passes through and is not kept Reports and records returned by QuickBooks are sent to your AI app in the same request and are not written to disk, kept in a database, logged, or reused. If a request fails, the server logs the tool name and a short error message, not the data. ## What is kept | Kept | Why | For how long | | --------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------ | | **Intuit sign-in tokens and your company ID** | Lets the connector call QuickBooks for you. Tokens are encrypted (AES-256). | Until you disconnect. Intuit’s refresh token lasts up to 100 days. | | **Hashes of the tokens your AI app holds** | Checks that a request really comes from the app you approved. The tokens themselves are never stored. | One hour for access, 90 days for refresh. | | **Your AI app’s registration** | Its name and the addresses it returns to after sign-in. | Kept so the app can sign in again. | | **A previewed change** | The change you asked for, encrypted, waiting for your approval. | 15 minutes, or until it is used. | | **A write log** | Which action ran on which record type and record ID, with Intuit’s transaction ID. No amounts, names or other contents. | Kept so a change can be traced if something goes wrong. | | **Read counts** | How many reads each company made today, and the service this month. | Kept to enforce the limits below. | Encrypted tokens and previews use a key held only on the server. Like any web service, the hosting provider also processes IP addresses and request details to deliver and protect the service. ## Your AI app Whatever the connector returns becomes part of your conversation in Claude, ChatGPT or another AI app. That app stores and processes it under its own terms and privacy policy, which I don’t control. Check those settings, for example whether your conversations are used for training, before connecting company books. ## Intuit Intuit processes your sign-in and every API request under the [Intuit Global Privacy Statement](https://www.intuit.com/privacy/statement/). The connector is independent and is not made or endorsed by Intuit. QuickBooks and Intuit are trademarks of Intuit Inc. ## Sharing and selling I don’t sell or rent data, and I don’t share it with anyone except Intuit (to make the API calls you ask for) and the hosting provider (to run the service). I would disclose data only if the law required it, and would tell you unless that was forbidden. ## Disconnecting and deletion - Ask your AI app to disconnect QuickBooks. The connector revokes its access with Intuit and deletes the stored tokens and any pending previews for your company straight away. - Or remove the connector from the Apps page in QuickBooks. The next time the connector tries to use the revoked tokens, it deletes them. - To also delete the write log and read counts for your company, email [ankur@nocodetalks.co](mailto:ankur@nocodetalks.co) with your company name. I reply within a few business days. ## Security The connector runs over HTTPS. Intuit’s tokens and previewed changes are encrypted with AES-256-GCM, and the tokens given to your AI app are stored only as SHA-256 hashes. Each sign-in reaches one company only, and a session for one company can’t reach another. No system is perfectly secure; if a breach ever affected your data, I would tell you and Intuit promptly. ## Children The connector is for businesses and is not meant for anyone under 18. ## Your rights Wherever you are, you can ask what the connector holds about your company, ask for a copy, have it corrected, or have it deleted. Email [ankur@nocodetalks.co](mailto:ankur@nocodetalks.co). ## Changes If the connector starts keeping anything new, this page will say so first, with the date it changed. The terms of use are at [/quickbooks-mcp/eula](https://www.nocodetalks.co/quickbooks-mcp/eula).