Privacy Policy

URACE Administrative AI · Last updated: September 1, 2026

This policy describes how the URACE Administrative AI application ("the App") handles data. The App is an internal operations tool built and operated by URACE.US INC ("we", "us") for our own business use. It is not distributed to, sold to, or made available to the public.

1. Who this applies to

The App connects only to the QuickBooks Online company file belonging to URACE.US INC. It is used exclusively by authorized URACE.US INC personnel. We do not onboard third-party customers or connect other companies' QuickBooks accounts.

2. What data the App accesses

Through the Intuit QuickBooks Online API, and only with the com.intuit.quickbooks.accounting scope, the App may read and write:

• Customer records (name, email, phone, billing address)
• Invoices, estimates and their line items
• Products and services in our catalog
• Accounts receivable reports

The App does not access payroll data, bank credentials, card numbers, or any payment instrument. It does not process payments.

3. Why we access it

To prepare and review invoices and estimates for our karting services, to track outstanding balances, and to keep our internal records consistent with our project management and document signing systems.

4. Where data is stored

The App runs on a private virtual server hosted with Amazon Web Services in the United States. Data retrieved from QuickBooks is held only for as long as needed to complete the task at hand, plus operational logs. Access credentials are stored as environment variables on that server with owner-only file permissions, never in source control.

5. What we do not do

• We do not sell, rent or trade any data.
• We do not share QuickBooks data with third parties, except the infrastructure providers required to run the App (AWS for hosting, Anthropic for language model processing).
• We do not use QuickBooks data to train machine learning models.
• We do not access any QuickBooks company other than our own.

6. Security

Access is over HTTPS/TLS. OAuth tokens are stored with restricted file permissions and are never written to logs, source control or the App's user interface — the interface reports only whether a credential is present, never its value. The server is accessed over SSH with key authentication.

7. Retention and deletion

Operational logs are retained for up to 90 days. Disconnecting the App from QuickBooks revokes its tokens immediately and stops all access. To request deletion of any stored data, contact us at the address below.

8. Changes

If this policy changes, the updated version will be published at this same address with a new "Last updated" date.

9. Contact

Intuit and QuickBooks are trademarks of Intuit Inc. This application is not endorsed by or affiliated with Intuit Inc.