Privacy Policy

Updated: October 2, 2026

1. Introduction

1.1 This Privacy Policy explains how PRIMEPEAK INC. ("Company," "we," "us," or "our") handles information when you use PrimePeak Books ("Service"), a locally installed bookkeeping application that integrates with Intuit QuickBooks Online, and our website at primepeak.io.

1.2 By using our Service, you agree to the handling of your information as described in this Privacy Policy. This Policy is intended to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection regulations.

Product Information

1.6 Product Name: PrimePeak Books

1.7 Customer Support Email: info@primepeak.io

2. Our Privacy-First Approach

2.1 PrimePeak Books is a locally installed application. It runs on your own computer and stores all of its data on that computer.

2.2 We operate no server component. There is no PrimePeak cloud service that receives, hosts, or processes your data. There is no account to create with us, no synchronization service, and no telemetry or usage analytics collected from the Service.

2.3 We do not receive your data. We do not hold it, cannot access it, and do not disclose it — to advertisers, to data brokers, or to anyone else.

2.4 One exception, described in full in Section 7. To read the documents you supply, the Service sends their contents to a third-party artificial intelligence provider for processing. That provider receives document content; PrimePeak does not. Section 7 sets out exactly what is sent, to whom, and on what terms.

3. Information the Service Accesses

3.1 QuickBooks Online data. When you authorize the Service to connect to your QuickBooks Online company, it may read — and, where you explicitly enable write access, create or modify — the following categories of data through Intuit's API:

3.1.1 Company and account data: chart of accounts, tax codes, fiscal year settings, and currencies.

3.1.2 Contact records: customers, vendors, and their associated contact and tax registration details.

3.1.3 Transactions: invoices, bills, expenses, payments, credit memos, journal entries, and deposits.

3.1.4 Products and services: item lists and their associated income accounts and pricing.

3.1.5 Reports: financial reports generated from the data above.

3.2 Documents you supply. The Service processes files that you place in its working folders — invoices, receipts, bank statements, subscription reports, and similar records — in order to extract accounting information from them. These files are read from your computer and remain on your computer.

3.3 Authentication credentials. The Service stores the OAuth client credentials and refresh token issued by Intuit in a local configuration file, so that it can maintain its connection to your QuickBooks company without repeated sign-in.

3.4 Information we do not access. The Service does not access your contacts, location, camera, microphone, browsing history, or any data unrelated to the bookkeeping function you have asked it to perform.

4. How Information Is Used

4.1 Information accessed by the Service is used solely to provide its function to you: extracting data from your documents, recording bookkeeping entries, reconciling transactions against your records, and presenting your own financial information back to you.

4.2 We do not use your data for advertising, profiling, resale, analytics, or the training of machine learning models. We are not in a position to do so, as we do not receive it.

4.3 The Service does not create user profiles, does not track behaviour across applications or websites, and does not participate in any advertising network.

5. Where Information Is Stored

5.1 All data accessed or produced by the Service is stored locally on your computer, in a database file and document folders under your control.

5.2 Authentication credentials issued by Intuit are stored locally in a configuration file on the same computer.

5.3 No copy of your accounting data, documents, or credentials is transmitted to, stored by, or backed up to PrimePeak.

5.4 Document contents are transmitted to a third-party artificial intelligence provider for extraction, as described in Section 7. Extracted results are returned to your computer and stored there.

6. Disclosure to Third Parties

6.1 We do not sell, rent, trade, share, or otherwise disclose your information.

6.2 Intuit. The Service communicates directly with Intuit's QuickBooks Online API in order to read and write your accounting records. That communication is between your computer and Intuit, and is governed by Intuit's privacy statement and by your own agreement with Intuit.

6.3 Artificial intelligence provider. The Service transmits the contents of documents you supply to a third-party AI provider in order to extract accounting data from them. This is a core function of the Service, not an optional add-on. See Section 7 for full details of this processing.

6.4 We may disclose information if required by law. In practice, because we do not hold your data, any such request would need to be directed to you or to Intuit.

7. Artificial Intelligence Processing

7.1 What the Service uses AI for. To read the documents you supply, the Service sends their contents to a third-party artificial intelligence provider, which extracts structured accounting information from them — for example vendor name, document number, date, currency, line item descriptions, tax amounts, and totals.

7.2 Current provider. The Service currently uses Anthropic PBC ("Anthropic") and its Claude models for this processing. Anthropic's handling of data submitted through its API is governed by Anthropic's privacy policy and its commercial terms of service.

7.3 What is sent. Only the following leaves your computer for this purpose:

7.3.1 the contents of documents you have explicitly placed in the Service's working folder, including the text and, for scanned or photographed records, the images themselves;

7.3.2 the names of accounts and items from your chart of accounts, where these are needed to classify an extracted line item correctly.

7.4 What is not sent. The Service does not transmit your QuickBooks credentials, your Intuit access or refresh tokens, your complete accounting records, your customer or vendor lists, or any document you have not placed in its working folder.

7.5 No training on your data. Your data is not used to train any artificial intelligence model. PrimePeak does not train models. The Service uses the provider's commercial API, under terms that do not permit submitted data to be used for model training.

7.6 No autonomous action. The AI provider receives document content and returns extracted values. It has no access to your QuickBooks connection and cannot write to your accounting records. Every extracted entry is staged locally and requires your explicit review and approval before anything is written to QuickBooks Online.

7.7 Retention by the provider. Data submitted to the AI provider may be retained by that provider for a limited period in accordance with its own terms, for example for abuse monitoring. PrimePeak does not control that retention and does not receive a copy of the submitted data.

7.8 Automated processing and accuracy. Extraction is automated and may be inaccurate. Extracted values are presented to you for review, and no automated decision is made about you that produces a legal or similarly significant effect. You remain responsible for verifying every entry before it is recorded.

7.9 Changes of provider. If we change the AI provider used by the Service, this Policy will be updated to name the new provider and the "Updated" date at the top of this page will change.

8. Security

8.1 The Service stores credentials and financial data on your computer. The security of that data therefore depends principally on the security of that computer.

8.2 We recommend that you enable full-disk encryption, protect your user account with a strong password, keep your operating system current, and ensure that credential and database files are not placed in shared folders or committed to version control systems.

8.3 The Service connects to Intuit exclusively over TLS-encrypted connections and follows Intuit's OAuth 2.0 authorization flow. It does not transmit your Intuit password, and it never sees your QuickBooks sign-in credentials.

8.4 The Service requests only the com.intuit.quickbooks.accounting scope. It does not request payment processing permissions.

8.5 The Service is distributed with write operations disabled by default, so that a newly authorized connection is read-only until you deliberately enable writing.

9. Data Retention and Deletion

9.1 Data persists on your computer until you delete it. We apply no retention period because we hold no data.

9.2 You may remove all locally held information at any time by deleting the Service's database file, its document folders, and its configuration file.

9.3 Deleting local data does not delete records already written to your QuickBooks Online company. Those records are managed through QuickBooks Online directly.

10. Revoking Access

10.1 You may disconnect the Service from your QuickBooks Online company at any time through Intuit's account management interface, under Settings → Apps, or via the "My Apps" page of the Intuit App Store.

10.2 Revocation immediately invalidates the stored refresh token and ends the Service's ability to access your QuickBooks company.

10.3 Revocation does not delete data already stored locally on your computer. See Section 9 for local deletion.

11. Your Rights

11.1 Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict its processing.

11.2 Because your data resides on your own computer and in your own QuickBooks Online company, you may exercise these rights directly: your data is already in your possession and under your control.

11.3 For any question about these rights in relation to the Service, contact us at info@primepeak.io.

12. International Transfers

12.1 PrimePeak does not transfer your data internationally, because we do not receive it.

12.2 Your connection to Intuit may involve processing in jurisdictions where Intuit operates. That processing is governed by Intuit's own privacy statement.

12.3 Document contents sent to the artificial intelligence provider described in Section 7 may be processed outside Canada, including in the United States, where that provider operates. Where you are located in a jurisdiction that restricts such transfers, you are responsible for determining whether this processing is appropriate for the documents you supply.

13. Children's Privacy

13.1 The Service is business accounting software. It is not directed at, marketed to, or intended for use by children under the age of 16, and we do not knowingly collect information from children.

14. Changes to This Policy

14.1 We may update this Privacy Policy from time to time. Material changes will be reflected in the "Updated" date at the top of this page and published at this URL.

14.2 Continued use of the Service after a change constitutes acceptance of the revised Policy.

15. Contact Us

15.1 Questions or concerns about this Privacy Policy may be directed to our Privacy Officer, who is accountable for our compliance with this Policy:

PRIMEPEAK INC. 4936 Yonge Street, Suite 515 Toronto, ON, Canada, M2N 6S3 info@primepeak.io