Privacy Policy — BNBHubs Hermes Integration

Effective Date: May 11, 2026

Owner: BNBHubs (operated by Muhammad Sherriff)

Contact: muhammad@bnbhubs.com

This Privacy Policy explains how BNBHubs ("we", "us", "our") collects, uses, and protects information when you use the BNBHubs Hermes Integration (the "Service"), an internal accounting integration that connects QuickBooks Online to BNBHubs' internal operations system.

1. Information We Collect

From Intuit QuickBooks

When you authorize the Service via Intuit OAuth, we receive an access token and refresh token that allow us to read your QuickBooks Online accounting data, including:

• Company information (name, legal name, country, fiscal year settings)
• Transactions, invoices, bills, payments, and journal entries
• Accounts, customers, vendors, items, and balances
• Reports (Profit & Loss, Balance Sheet, etc.)

We do not receive or store your Intuit account password, banking credentials, or payment method details.

From You Directly

• Your contact email (provided when authorizing the integration)
• Configuration preferences you set in the BNBHubs Hermes interface

Automatically

• Connection logs (timestamps, success/failure of API calls) for diagnostic and security purposes

2. How We Use Information

We use the information solely for:

• Generating accounting reports, reconciliations, monthly closes, and tax-prep summaries for the authenticated user
• Categorizing transactions according to user-defined rules
• Building unified financial dashboards (cash flow, net worth, P&L trends)
• Maintaining the authorized OAuth connection (token refresh)
• Diagnosing and resolving integration issues

We do not use your data for advertising, training third-party models, or any purpose unrelated to the accounting integration you authorized.

3. How We Store and Protect Information

• OAuth refresh tokens are stored encrypted at rest with file-system permissions restricted to the system user.
• The Service runs locally on the user's authorized infrastructure. Data is not transmitted to external servers operated by BNBHubs.
• Connection logs are retained for diagnostics for up to 90 days, then rotated.
• We follow reasonable security practices to protect against unauthorized access, alteration, or disclosure.

4. Sharing

We do not sell, rent, or share your QuickBooks data with third parties, except:

• With Intuit, via their official API, to fulfill your authorized requests
• When required by law, valid legal process, or to protect the rights, property, or safety of BNBHubs or others

5. Your Rights

You may at any time:

• Revoke access by disconnecting the integration from your Intuit Developer dashboard (My Apps → BNBHubs Hermes → Disconnect)
• Request deletion of any locally stored tokens or logs by contacting us at the address above
• Request a copy of data we hold about you
• Correct inaccuracies in any data we hold

6. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect information from children.

7. International Users

The Service is operated from Qatar. If you use the Service from outside Qatar, you consent to the transfer of your data to Qatar for the purposes described in this Policy.

8. Third-Party Services

The Service interacts with Intuit's QuickBooks Online platform. Intuit's privacy policy governs how Intuit handles your data: https://www.intuit.com/privacy/

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted at the URL above with a new Effective Date. Continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related inquiries, contact:

Muhammad Sherriff

muhammad@bnbhubs.com

BNBHubs