SITE SERV.AI PRIVACY POLICY

1. INFORMATION WE COLLECT

2. HOW WE USE INFORMATION

• Provide, operate, and maintain the Services
• Authenticate users and manage accounts
• Process payments and subscriptions
• Synchronize data with QuickBooks Online per your authorization
• Enable AI-assisted responses and recommendations
• Improve performance, functionality, and security
• Communicate about updates, security alerts, and support
• Comply with legal obligations and enforce agreements

We do not sell or rent your personal information.

3. LEGAL BASES FOR PROCESSING (GDPR)

• Performance of a contract – to deliver the Services you request.
• Legitimate interests – to improve, secure, and operate the Services.
• Legal obligations – to comply with applicable laws and regulations.
• Consent – when you opt in to integrations or communications that require it.

4. HOW WE SHARE INFORMATION

We share information only with essential service providers (“subprocessors”) that help operate the Services, each under confidentiality and data-protection obligations. These include:

• Intuit (QuickBooks Online) – accounting data integration
• Stripe – payment processing
• Google Analytics – usage and performance tracking
• Google Firestore – secure cloud data storage
• OpenAI – AI response generation
• Hosting and infrastructure providers

We do not share QuickBooks data or personal information with advertisers or unrelated third parties.

5. QUICKBOOKS / INTUIT COMPLIANCE

• Access to QBO requires your explicit OAuth 2.0 authorization.
• QuickBooks data is used only to perform the synchronization and features you enable.
• We store only Sync Tokens (accessToken, refreshToken, realmId, expiry timestamps), not accounting records.
• You may revoke access at any time via SiteServ.ai or your Intuit account.
• Upon revocation, Sync Tokens are deleted within a commercially reasonable period, subject to lawful retention.
• Use of the QBO integration is subject to Intuit’s developer and end-user terms.
• We are not responsible for Intuit outages, API changes, or data-handling practices.

6. OPENAI USAGE (AI ASSIST FEATURES)

To provide AI-assisted functionality, we may send limited project or service call descriptions to OpenAI for processing. We do not intentionally send personal identifiers or QuickBooks data unless the user includes them. OpenAI acts as a service provider and does not use this data to train public models. Transmissions are encrypted. Users should avoid including sensitive personal data in AI prompts unless necessary.

7. COOKIES AND TRACKING

We use cookies and similar technologies to maintain sessions, analyze traffic, and remember preferences. You may control cookies through your browser settings, but disabling them may limit certain features.

8. DATA RETENTION

We retain personal data only as long as necessary to provide the Services, fulfill contractual obligations, comply with legal requirements, and resolve disputes. Sync Tokens are deleted promptly after QuickBooks access is revoked or your account is terminated. Backups are deleted according to normal rotation schedules.

9. DATA SECURITY

• SSL/TLS encryption for data in transit
• Encryption at rest for Sync Tokens and sensitive fields
• Password hashing and salting
• Role-based access controls and monitoring
• Regular backups and vulnerability management
• Incident-response and breach-notification procedures

No system is completely secure, but we use industry-standard measures to protect your information.

10. YOUR RIGHTS (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you may have the right to access, correct, delete, or receive a copy of your personal data; object to or restrict certain processing; opt out of marketing communications; withdraw consent; and exercise other rights under GDPR and CCPA/CPRA without discrimination.

Submit requests to support@siteserv.ai. We will verify and respond as required by law.

11. INTERNATIONAL TRANSFERS

Your data may be processed in the United States or other jurisdictions where we or our providers operate. When transferring personal data from the EEA/UK/Switzerland, we use appropriate safeguards (e.g., Standard Contractual Clauses) as applicable.

12. CHILDREN’S PRIVACY

The Services are not directed to children under 13, and we do not knowingly collect personal data from them. If we learn we have collected such data, we will delete it promptly.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Material changes will be communicated via the Services or email. The updated version will include a revised effective date. Continued use of the Services after an update constitutes acceptance of the revised policy.

14. CONTACT INFORMATION

15. CONSENT

BY USING SITESERV.AI, CREATING AN ACCOUNT, OR CONNECTING TO QUICKBOOKS ONLINE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTAND THIS PRIVACY POLICY AND AGREE TO ITS TERMS.