Privacy Policy

M2 CPA Bookkeeping — QuickBooks Online Integration
Effective date: June 6, 2026

This Privacy Policy describes how M2 CPA, LLC (“M2 CPA,” “we,”
“us”) handles information accessed through the M2 CPA Bookkeeping application
(the “Application”), a private integration with QuickBooks Online (“QBO”)
provided by Intuit Inc.

1. Who we are

M2 CPA, LLC is an accounting firm based in California, United States. The Application is
used internally by M2 CPA to deliver bookkeeping services to our own firm and to clients who
have engaged us and authorized the connection.

2. Information we access

When an authorized QuickBooks company administrator connects the Application, and only with
that authorization, we access accounting data from that company via Intuit’s API under the
Accounting scope (com.intuit.quickbooks.accounting). This may include the chart of
accounts, transactions, vendors and customers, company profile information, and financial
reports. We request no other Intuit scopes. We do not access your Intuit login credentials;
authorization is handled by Intuit through OAuth 2.0.

3. How we use the information

We use accounting data solely to provide bookkeeping and accounting services — for
example, categorizing transactions, preparing draft journal entries, and generating financial
reports for review by a licensed professional. We do not use the data for
advertising, and we do not sell or rent it.

4. How we store and protect it

OAuth access and refresh tokens are stored on access-controlled systems operated by M2 CPA
with restricted file permissions, and are used only to make authorized API calls on your behalf.
All data is transmitted over encrypted connections (TLS/HTTPS). Write operations performed by the
Application default to a draft (“dry-run”) mode and require human approval before any
change is committed to your QuickBooks company.

5. Sharing

We do not share your accounting data with third parties, except: (a) with Intuit, which is the
source of the data and the provider of the API; and (b) where required by law or to comply with a
valid legal process. We do not use sub-processors to resell or repurpose your data.

6. Retention and your control

We retain authorization tokens only while the connection is active. You may end the connection
at any time by disconnecting the Application (see the
Disconnect page) or by removing it from within QuickBooks Online
(Apps → Manage). Disconnecting revokes our access and deletes the stored tokens for that
company.

7. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an
updated effective date on this page.

8. Contact

Questions about this policy or your data: info@m2cpa.com,
M2 CPA, LLC, California, USA.