01. Who this policy covers
Towit Data Lake Connector is an internal integration for Towit Repairs LLC. This policy describes the QuickBooks connector for authorized company personnel. It is separate from Intuit's own privacy statement. Towit operates this integration for its own business purposes and does not process data on Intuit's behalf.
02. Information the connector accesses
With an authorized QuickBooks administrator's consent, the connector can request company information and the chart of accounts through the QuickBooks Online Accounting API. Responses can contain company names, addresses, contact information, accounting settings, account identifiers, account names, classifications and balances, where supplied by QuickBooks. The connector also handles the connected company identifier, OAuth authorization state and access and refresh tokens needed to maintain the connection. Operator configuration includes a username, password hash, multifactor-authentication secret and session information.
03. How information is used
Information is used to verify the authorized company, validate the connection and support Towit's internal accounting integration. The current verification action reads company information and accounts, then returns connection status and an account count to the operator. It does not display or persist the accounting response as a reporting dataset. This connector does not currently implement scheduled extraction, transaction posting or a complete ledger export. Any expansion of the data accessed or its use must be reviewed and reflected in this policy before it is enabled.
04. Access and service providers
Access is restricted to authorized personnel administering Towit's integration. Data passes between the connector and Intuit when the company is authorized or an API request is made. Infrastructure providers supporting hosting, network delivery and configured encrypted backups may process information to operate those services. The connector is configured for a Hostinger-hosted server; Towit's supporting infrastructure includes Cloudflare services. This integration does not sell QuickBooks data, use it for targeted advertising or provide it to unrelated customers. Required legal disclosures may be made in response to applicable law or valid legal process.
05. Storage and security
The connector is designed to encrypt stored OAuth tokens and diagnostic payloads, hash the operator password and require multifactor authentication for operator actions. Connection state is separated between testing and production. Production access is restricted to authorized operators. These safeguards do not eliminate all risk; no system can guarantee absolute security.
06. Retention, disconnecting and deletion
The current read check processes accounting responses in memory; it does not create a retained copy of those responses. Connection credentials and configuration are retained to support an authorized connection. Security diagnostics include timestamps, action names, response statuses, limited error codes and, where relevant, Intuit support trace identifiers. The journal retains at most 5,000 events and prunes events older than 30 days when a new event is recorded; an inactive journal may retain older entries until activity resumes or an administrator removes them. Disconnecting requests revocation of the connection's token and removes local token state only after successful revocation. A failed revocation is reported for operator follow-up. Disconnecting does not delete the company's original QuickBooks records, security journal, retained configuration or any existing backups. To request deletion of integration-held information, contact support@towitenterprises.com. An authorized administrator reviews the request, identifies the information held and any applicable legal or security retention requirements, and communicates the scope and timing of the response. Retained configuration and diagnostic information are removed when no longer needed for the connection, security, recovery or applicable legal obligations. Any existing backup copies are handled separately through backup administration and may remain until they are removed under the applicable retention process; disconnection does not trigger immediate erasure of backups. Request information about any retained copies through the same contact. This policy does not promise automatic deletion or a fixed backup-expiry period.
07. Requests and your choices
An authorized company administrator may disconnect through the integration or manage the connection within QuickBooks. Contact support@towitenterprises.com to request access information, correction of integration-held information or deletion, or to report a suspected security incident. We verify the requester's authority before acting and consider legal retention obligations and the rights of other people. Requests concerning original QuickBooks accounting records should be handled in QuickBooks through an authorized company administrator.
08. Website information and changes
These information pages do not include advertising trackers, analytics scripts, contact forms or a connection to QuickBooks. Hosting and network providers may process ordinary request metadata such as IP address, requested URL, browser information and timestamps to deliver and protect the pages. The restricted connector uses necessary session cookies for authentication and request protection. This policy will be updated when the integration's data practices change. For privacy, deletion, security or support questions, contact support@towitenterprises.com. The effective date shown on this page identifies the current policy. Material changes to data practices will be communicated to authorized users before the changed processing begins.
Related document: Terms of use