Privacy policy

1. Information we collect

We collect account and organization information you provide, such as names, email addresses, account type, company details, roles and subscription information. We process the business records you enter or upload, which may include customer and vendor contact details, invoices, bills, checks, account balances, transaction descriptions, employee and time records, classes, receipts, attachments and signature images.

We also process session cookies, authentication and authorization records, connection identifiers and tokens, import history, audit records, and operational information such as request times, IP addresses, browser details and errors to the extent these are recorded by our application and hosting services. Do not upload information that is unnecessary for your use of the service.

2. QuickBooks Online information

Connecting QuickBooks is optional. You sign in on Intuit’s website and authorize access to the company you select. RocketSum does not ask for or store your QuickBooks password. We store connection identifiers and encrypted access and refresh tokens to carry out authorized requests.

Depending on the permissions granted and import selections, we may retrieve company information; accounts; customers and vendors; products and services; classes and locations; employees and payment terms; invoices, estimates, sales receipts, payments, credits and refunds; bills, bill payments, checks, expenses and purchase orders; journal entries, deposits and transfers; and attachment metadata and files. Date filters do not necessarily apply to company lists or attachment metadata. An import can retain original source records even where they are not mapped to a working RocketSum ledger entry.

We use QuickBooks data to provide the imports and accounting workflows you request, maintain their integrity, troubleshoot problems and secure the connection. We do not sell QuickBooks data, use it for advertising, or use it to train general-purpose AI models. We do not write changes back to QuickBooks as part of the import workflow.

3. How we use information

We use information to authenticate users, manage company access, store and display records, perform requested imports and calculations, prepare documents, support subscriptions, respond to support requests, investigate errors and misuse, and meet applicable legal obligations. If you request invoice or transaction delivery, the relevant recipient receives the content and link you choose to send. Anyone with a valid shared invoice link may be able to view its customer-facing content; share links only with intended recipients.

We process information as necessary to provide our service under our agreement with you, for legitimate operational and security interests, to comply with law, or with consent where required. We do not sell personal information or share it for cross-context behavioral advertising.

4. Company access and service providers

Company owners, authorized firm staff and other users with assigned permissions may access company records. Platform administrators may access information where needed for administration, support, security and legal obligations. Your organization is responsible for assigning appropriate access and for having permission to provide other people’s information.

We use Google Cloud for hosting and infrastructure. When enabled and configured, Stripe processes subscription or payment-related information, Intuit supplies authorized QuickBooks data, and configured email providers deliver requested messages. Providers receive information needed for their services and handle some information under their own terms and privacy policies. Connecting Stripe or QuickBooks does not by itself mean every payment or import feature is available.

We may disclose information when legally required, to protect rights and security, with your instruction or consent, or as part of a business reorganization or transfer subject to appropriate confidentiality and applicable law. We do not provide unaffiliated parties with access for their own advertising.

5. Cookies

RocketSum uses cookies and similar browser storage to keep users signed in, protect sessions and support application preferences. Blocking essential cookies may prevent sign-in or other features from working. External providers may use their own cookies when you visit or authorize their services.

6. Security and storage

We use measures including HTTPS, password hashing, permission checks and encryption of stored integration tokens to protect information. These measures do not guarantee that unauthorized access or loss can never occur. Keep your login details private, restrict company access and promptly report suspected misuse.

Our current application hosting region is in the United States. Information may be processed in the United States and other locations used by our service providers. Applicable privacy rights and transfer protections depend on your location and the services involved.

7. Retention, disconnection and deletion

We retain information while needed to provide your workspace, maintain accounting and audit records, address disputes, comply with legal obligations or protect the service. Retention depends on the type of information, your organization’s instructions and applicable requirements; records are not automatically erased when a subscription ends.

You may disconnect QuickBooks through RocketSum’s connection controls or revoke access through Intuit. Disconnection stops future authorized imports through that connection; it does not automatically delete records already imported. To request deletion of imported QuickBooks data, other personal information or an account, contact us below and identify the organization and records involved. We verify identity and authority before processing requests, and explain any information that must be retained for legal or security reasons. Residual copies may remain in backups until their normal retention cycle ends and are restricted from ordinary use.

8. Your choices and rights

Depending on applicable law, you may request access, correction, a copy, deletion or restriction of your personal information, object to certain processing, or withdraw consent for optional processing. Contact us to exercise these rights; we respond within the time required by applicable law. We may need information to verify your request. We do not discriminate against people for exercising applicable privacy rights.

If your information was entered by a business or bookkeeping firm using RocketSum, that organization generally controls its business records. Contact it first where appropriate; we can help route requests and act on authorized instructions. You may also have a right to complain to your local privacy regulator.

9. Children and changes

RocketSum is intended for adults conducting business and is not directed to children under 18. Contact us if a child’s personal information has been submitted without appropriate authority. We may update this policy as our service or legal obligations change, show the revised effective date, and provide additional notice of material changes where required.

10. Contact

For privacy, access, deletion or security requests, email amistry@mistrysgroup.com with “RocketSum privacy” in the subject. Do not email passwords, API secrets or full payment-card details.

Mistrys Group LLC · 2128 Athens Hwy, Gainesville, GA 30507-7404, United States.