Privacy Policy

This Privacy Policy describes how Alberg CPA ("Alberg CPA," "we," "us," or "our") collects, uses, stores, protects, and disposes of information in connection with the Alberg CPA firm software platform and client portal (the "Platform") and the professional services we provide. It applies to clients, their designated users, and Alberg CPA personnel who access the Platform.

• Account information: your name, email address, role, and authentication details when you are invited to and log in to the Platform.
• Client and engagement information: information about your business or personal profile that is necessary to provide our services, such as entity details, contact information, engagement scope, and service preferences.
• Accounting and financial data: with your authorization, data we obtain from connected services (see Section 3), as well as financial documents, records, and communications you or your team upload or share through the Platform.
• Usage information: records of activity within the Platform, such as time entries, task updates, and message history, used to manage engagements and firm operations.

With your authorization, the Platform may connect to QuickBooks Online, operated by Intuit Inc., using Intuit's OAuth 2.0 authorization process. The connection is initiated only after you, or an authorized representative of your organization, expressly authorize it.

Once authorized, we access your QuickBooks Online accounting and financial data — such as company information, chart of accounts, transactions, and related records — solely as necessary to provide the services agreed upon in your engagement, including accounting, bookkeeping, transaction reconciliation, financial reporting, and related firm services. We do not access your QuickBooks data beyond the scope of the authorization you grant and the services we perform for you.

How your authorization credentials are protected: the OAuth access tokens and refresh tokens issued by Intuit are stored securely on our server-side infrastructure. They are never exposed to your browser, are not disclosed to other clients, and are not accessible to unauthorized users. Access to stored credentials is restricted to Alberg CPA's server-side systems and authorized personnel acting within their roles.

We use the information described above to:

• Provide the professional services described in your engagement, including bookkeeping, accounting, reconciliation, reporting, and tax-related services;
• Operate, maintain, and secure the Platform and its client portal;
• Communicate with you about your engagement, deadlines, requests, and billing;
• Comply with legal, regulatory, and professional obligations applicable to CPA firms; and
• Protect the Platform, your data, and our systems against unauthorized access or misuse.

The Platform relies on certain third-party services, including Intuit (QuickBooks Online) when you authorize a connection, and our hosting and infrastructure providers. Third-party services operate under their own terms and privacy policies, which we encourage you to review. When you connect QuickBooks Online, data transferred between the Platform and Intuit is governed by your Intuit account settings and Intuit's privacy policy as well as by this Policy. We do not sell your personal information.

We maintain administrative, technical, and physical safeguards designed to protect the information we hold. These include requiring authenticated access to the Platform, role-based access controls so that users can access only data appropriate to their role, encryption of data in transit, and secure server-side storage of sensitive credentials (such as QuickBooks OAuth tokens). Data within the Platform is segregated by client so that one client's data is not exposed to another client or to unauthorized users. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

We retain your information for as long as necessary to provide our services, to comply with applicable record-retention requirements for CPA firms (including tax and audit record-retention periods), and to resolve disputes. When an engagement ends, we retain or delete records in accordance with those obligations and our retention schedule. You may request deletion of data that we are not legally or professionally required to retain by contacting your Alberg CPA engagement team; we will respond within a reasonable period and inform you of any applicable limitations.

You may revoke our access to a connected third-party service at any time. For QuickBooks Online, you can disconnect the connection through the Platform or revoke the application's authorization in your Intuit account settings at any time. Upon revocation, we cease all further access to your QuickBooks Online data, and stored connection credentials are handled in accordance with Section 7. Revoking authorization may limit our ability to provide services that depend on that connection, and previously obtained data already used to prepare your records remains subject to our retention obligations.

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal information, to receive a copy of it, and to object to or restrict certain processing. To exercise any of these rights, contact your Alberg CPA engagement team. We will not discriminate against you for exercising your privacy rights.

The Platform is intended for business and professional use and is not directed to children under 13.

We may update this Privacy Policy from time to time. The current version will be posted on this page with the "Last updated" date above. Material changes will be communicated to active Platform users where appropriate.

If you have questions about this Privacy Policy or how your information is handled, please contact your Alberg CPA engagement team or the contact listed in your engagement letter.