Privacy policy: the Mydas QuickBooks connection
What this app is
Mydas is a finance automation service operated by Mydas LLC (Washington, USA) for promotional-products distributors. Each customer company has its own space in the service and connects its own QuickBooks Online company file to it. The connection is made by one of the customer’s administrators and serves that customer alone.
What we access
With the authorization of a customer administrator, Mydas reads accounting data from the connected QuickBooks company: the chart of accounts and balances, customers and vendors and their balances, invoices, payments, bills, bill payments, journal entries, purchases, deposits, and the profit and loss and balance sheet reports.
What we write
In the month-end close, Mydas creates journal entries in the connected QuickBooks company, and only those a person at the customer has approved inside Mydas. Each entry is drafted from that customer’s own records, shown to the customer’s finance staff, and written only after approval; the write is logged with the approver and the time. Mydas does not change or delete entries that already exist in QuickBooks.
Automated drafting
Mydas uses a large language model (Anthropic’s Claude, through Anthropic’s API) to read vendor invoices and statements and to draft month-end entries from a customer’s mirrored QuickBooks records. The model drafts; a person decides. Data sent to the model is used only to produce that customer’s drafts, is not used to train models, and is not shared with any other customer or party. Each customer’s use of the model is logged and capped.
How we store and protect it
The data read from QuickBooks is stored in a database dedicated to that customer, hosted in the United States, and shown only inside Mydas to people of that customer who are signed in and hold a finance role. The OAuth tokens Intuit issues are stored encrypted (AES-256-GCM) under a key that belongs to that customer and is itself encrypted under a key held outside the database. All traffic uses TLS. Signing in requires the Google Workspace or Microsoft 365 account the customer’s administrator invited.Mydas LLC staff can open a customer’s space to support it; every such session is recorded and limited in time.
Sharing
We do not sell, rent or share QuickBooks data with third parties. The only processors involved are the infrastructure providers that host the service and its databases, acting on our instructions. One customer’s QuickBooks data is never shown to another customer.
Retention and deletion
Mirrored data is kept while the QuickBooks connection is in use and is replaced on each sync. When a customer disconnects QuickBooks, the tokens are revoked with Intuit and deleted. Mirrored data is deleted when the customer leaves the service, and earlier on request to the contact below.
Contact
Questions about this policy: Mydas LLC, support@mydas.io.