Privacy Policy

What we collect

• Account information. Your name, email address and password (stored by our sign-in provider as a one-way hash, never in readable form), and the firms and businesses you belong to, with your role in each.
• Information from services you connect. When you connect QuickBooks Online, BQE Core or Harvest, we store the access tokens those services issue and read the records the work needs, such as accounts, vendors, customers, transactions, invoices, bills and ledger reports.
• QuickBooks Desktop. When you connect a QuickBooks Desktop company file, the QuickBooks Web Connector on your computer sends us its chart of accounts, classes, service items, vendors, customers and employees, and the lines of each bank and credit card account (dates, amounts, names, memos and reconciled marks), and we keep a copy to reconcile against. The Web Connector signs in with a password shown to you once; we keep only a one-way hash of it.
• Documents you upload. Bank and credit card statements and spreadsheets, images of paid checks, and the transaction lines, balances, headings, payees and memos we read from them.
• The work you do. Categories, payees, matches, corrections, reconciliations and posts, and a log of who did what and when. When a transaction line is deleted, the log keeps a copy of it (date, amount and description), so the record of what changed outlasts the line.
• Technical information. IP address, browser details and request logs, kept by our hosting and database providers to run and secure the service.

How we use it

• To provide the service: reading statements, suggesting categories and payees, matching bank lines to QuickBooks entries, proving reconciliations, and posting to QuickBooks when you ask us to.
• To keep the service secure, investigate problems and support you.
• To improve the service. We review how the product is used, for example how often a suggested category is changed or which statements fail to read, in order to decide what to fix. The reports prepared for our developers identify a business only by an internal code and contain counts and rates, not transaction descriptions, names, account numbers or amounts.

We do not sell your information and we do not use it for advertising.

Artificial intelligence

Two parts of the service use AI models run by other companies:

• Reading statements and checks: the text of a statement you upload is sent to Anthropic's Claude models to extract its transactions and balances, and pictures of paid checks (printed on a statement, or uploaded on their own) are sent to read each check's number, amount, date, payee and memo.
• Suggesting categories: transaction descriptions and your chart of accounts are sent to AI models through Lovable's AI gateway, currently Google's Gemini models, to suggest a category or payee.

We send only what the task needs. We do not train our own AI models on your information. AI suggestions can be wrong, which is why every suggestion waits for a person to review it before anything is posted.

Who processes information for us

We use these service providers to run SyncMate Pro:

• Supabase: database, sign-in, file storage and server functions.
• Lovable: website hosting and the AI gateway described above.
• Anthropic: reading statements and check images.
• Google, through Lovable's AI gateway: category suggestions.
• Resend: sending emails such as team invitations.
• Inngest: running long background jobs such as statement reading.

Intuit (QuickBooks Online and QuickBooks Desktop), BQE Core and Harvest receive information only when you connect them, and only to carry out what you ask, such as posting a transaction. We may also disclose information if the law requires it, or to a successor if the business is sold or merged, under the same protections.

Who in your organization can see it

A business's information is visible to its own members and to the accounting firms it has engaged. Within a firm, owners and admins can see every engaged client, and members see only the clients an owner or admin has assigned to them. A business can end an engagement, and a firm can remove a member, at any time.

How long we keep it

We keep your information for as long as your account is active. You can ask us to delete it at any time by writing to support@syncmatepro.com. We will then delete it within a reasonable time, except for anything we must keep by law. Backups roll off on their own schedule.

Security

Information travels over encrypted connections. Access in the database is limited by rules that check which organization each person belongs to. Tokens for connected services are kept on our servers and never sent to your browser. No system is perfectly secure, and we will tell you promptly if a breach affects your information.

Your choices

• You can disconnect QuickBooks Online, QuickBooks Desktop, BQE Core or Harvest at any time from the Connections page.
• You can ask to see, correct, export or delete your information by writing to support@syncmatepro.com.
• If you are an employee of a firm, your firm controls the account and may need to make the request.

Children

SyncMate Pro is a business tool and is not intended for anyone under 18.

Changes

If we change this policy we will update the date at the top of this page. If a change is significant, we will also tell account owners by email or in the app before it takes effect.

Contact

Questions about this policy or your information: support@syncmatepro.com.