Privacy Policy
What this application is
The PayPal Sales Receipt Class Tool ("the Tool") is a private, internal command-line utility built and operated by LLAMALAND LLC for its own QuickBooks Online company. It is not distributed, sold, or made available to any other party, and it is not listed in the QuickBooks App Store.
The Tool is not a hosted service. It runs entirely on a computer controlled by LLAMALAND LLC. There is no server component, no multi-tenant backend, and no account system.
What data the Tool accesses
Using the QuickBooks Online Accounting scope (com.intuit.quickbooks.accounting), the Tool reads:
Company information and accounting preferences, solely to confirm it is connected to the correct company and that class tracking is enabled.
The list of classes defined in the company.
Sales Receipt transactions, including their line items, amounts, dates, totals, tax detail, and linked transactions.
The Tool writes exactly one kind of change:
A class reference (ClassRef) added to Sales Receipt line items that do not already have one.
It does not create, delete, or modify any other record. It never creates a class, never overwrites an existing class, and never alters dates, amounts, items, descriptions, quantities, rates, accounts, payment methods, deposit accounts, tax, discounts, or linked transactions. Every write is verified by re-reading the transaction afterwards and confirming nothing else changed.
What data is stored, and where
All storage is local to the operator's computer. Nothing is uploaded anywhere.
OAuth tokens — stored outside the source tree in the operator's home directory with file permissions restricted to the operator (0600) in a directory restricted the same way (0700).
Run state — a local SQLite database recording which transactions have been processed, so an interrupted run can resume safely.
Audit logs — append-only JSON Lines files recording what was attempted and what the result was. Credentials are removed before anything is written to a log.
Transaction snapshots — read-only copies of the QuickBooks objects before and after each change, retained as accounting evidence.
What data is shared
None. The Tool communicates only with Intuit's own API endpoints (quickbooks.api.intuit.com and oauth.platform.intuit.com) over HTTPS. There are no third-party services, no analytics, no telemetry, no crash reporting, no advertising, and no data processors. No data is sold, rented, or disclosed to anyone.
Personal information
The Tool does not seek out personal information. Sales Receipt records may incidentally contain a customer reference; this is read as part of the transaction and is used only to verify that the correct transaction was matched. It is never transmitted off the operator's computer and never written to a log file.
Retention and deletion
Local files persist until the operator deletes them. Access can be revoked at any time from within QuickBooks Online under Apps → My Apps → Disconnect, which invalidates the stored tokens immediately. Deleting the token file removes the stored credentials from the machine.
Security
All API traffic uses HTTPS.
Authorization uses OAuth 2.0 with a randomly generated state value verified with a constant-time comparison on the callback.
The authorization callback listens only on localhost.
Client secrets and tokens are kept out of version control and are never printed to logs or console output.
Children
The Tool is an internal accounting utility and is not directed to children.
Changes
Any change to this policy will be published on this page with an updated date above.
Contact
LLAMALAND LLC — admin@llamalands.com