Last updated 5 August 2026

This policy covers the internal QuickBooks Online integration operated by Bullfrog Spas North. The Integration is used only by Bullfrog Spas North staff and accesses only Bullfrog Spas North’s own QuickBooks Online company files.

What is accessed

Using the com.intuit.quickbooks.accounting scope, the Integration reads Customer, Invoice and Payment records — including customer name, email address, telephone number, billing address, invoice amounts and payment status — from Bullfrog Spas North’s QuickBooks Online company files.

Why

To match QuickBooks invoices to the corresponding sales order in our internal systems, so that staff scheduling a hot tub delivery can see whether it has been paid for. It is also used for internal accounts-receivable reporting.

How it is stored and protected

Data is stored in a private PostgreSQL database hosted by Supabase in the United States, encrypted in transit and at rest. Access is restricted to the service credential used by the Integration and to named Bullfrog Spas North administrators; database row-level security denies all other access. OAuth credentials are held in an encrypted secrets vault and are never written to logs.

Sharing

No data is sold, rented, or shared with any third party for marketing. Data is not transferred to anyone outside Bullfrog Spas North except the infrastructure provider that hosts it on our behalf.

Retention and deletion

Synchronised records are retained while the Integration remains connected. On disconnection we delete the synchronised QuickBooks data on request. To request deletion, or to ask what is held, contact info@bullfrogspasnorth.com.

Changes

Material changes will be reflected on this page with a revised date.