Privacy

This website

This part describes what insightanalytics.us itself collects, from anyone who reads it or uses the contact form. It has nothing to do with client accounting data.

What we collect

Only what you type into the contact form: your name, work email, organization, organization type, an optional phone number, and your message. The form also records how long the page was open before you submitted it, which is how we tell a person from an automated script.

Do not send financial records, student data or patient data through this website. If we need documents, we will tell you how to send them securely.

Why we use it

To read your message and reply to it, and to have the conversation you asked for. Your enquiry is emailed to the people here who would do the work. It is not used to build a marketing list and it does not subscribe you to anything.

Who else sees it

The form message is delivered by our transactional email provider and then sits in our business email accounts. Our hosting provider keeps ordinary server logs, including IP addresses, to run the site and to stop abuse.

We do not sell, rent or trade your information, and we do not pass it to anyone outside the firm except where the law requires it.

Cookies and analytics

As this site is built today it sets no advertising cookies and runs no third-party analytics or tracking scripts. If that changes, this page changes with it.

How long we keep it

Enquiries are kept while a conversation is open or likely to continue, and are deleted when they are not. Correspondence that becomes part of a signed engagement is kept under that engagement's records policy instead.

Your choices

Write to us at the address below to ask what we hold about you, to correct it, or to have it deleted. We will do it and confirm that it is done.

Children

This site is written for the administrators and boards of schools and other organizations. It is not directed at children and we do not knowingly collect information from them.

Changes to this part

When the practice changes, the wording here changes and the date at the top changes with it.

Client data we handle under an engagement

This part applies to organizations that have signed an engagement letter with us. It describes the data we handle in order to do that work, including everything we read from your QuickBooks Online company once you authorize a connection.

What we read from QuickBooks Online

We read the records we need to run your accounting, your reporting and your forecasting. By object type, that is:

• Company information: the company name, address, fiscal year, currency and comparable settings.
• Chart of accounts and general ledger: accounts, journal entries and transaction detail.
• Accounts receivable and accounts payable: customers, vendors, invoices, bills, credit memos and payments.
• Bank and credit card transactions: the transactions recorded in your file and their reconciliation status.
• Payroll summaries: the totals posted to the general ledger by account and period.
• Budgets: the budgets held in your QuickBooks Online company.
• Financial reports: the reports QuickBooks Online produces from the records above, including the balance sheet, the profit and loss, and the trial balance.

As part of a bookkeeping engagement we also record entries in your file: journal entries, corrections, categorizations and comparable postings. Those entries follow the approval workflow set out in your engagement letter. This is not a read-only connection, and we do not describe it as one.

What we never read or transmit

• Student-identifiable records. We do not read them through this connection and we do not transmit them anywhere.
• Patient-identifiable health information. Surgery center engagements are outside the scope of this connection.
• Your bank or QuickBooks Online login credentials. We never ask for them and we never hold them.

How access works

You authorize the connection yourself, inside QuickBooks Online, on Intuit's consent screen. The permission granted is the standard accounting scope. Nothing is connected until you approve it on that screen.

You can revoke it at any time. In QuickBooks Online, go to Settings, then Apps, find Insight Analytics and choose Disconnect. You can also simply ask us, and we will revoke it the same business day.

Signing out of QuickBooks Online does not disconnect the connection. It stays in place until it is disconnected.

What we use it for

• Performing the engagement you signed: the close, the reconciliations and the bookkeeping entries described in your engagement letter.
• Monthly board reporting.
• Budgets and forecasts.
• Audit-readiness workpapers.
• AI-assisted analysis, reviewed by a member of our team before it reaches you.

What we do not do with it

• We do not sell it.
• We do not use it for marketing.
• We do not share one client's data with another client.
• We do not allow it to be used to train AI models.

Who else is involved

Three third parties touch this data. There are no others.

• Intuit Inc., which operates QuickBooks Online. Your company file sits under your own subscription and Intuit's terms.
• Anthropic PBC, which provides the AI tools we use for analysis, including Claude. We have configured our account so that your data is not used to train its models. It retains inputs for up to 30 days in the ordinary course.
• Our email and hosting providers, which carry and store our correspondence with you and the deliverables we send.

Insight Analytics does not process QuickBooks data on Intuit's behalf. We are an independent controller of the data you authorize us to access.

How long we keep it

Engagement records are kept for the period set out in your engagement letter and for any period the law separately requires us to keep them.

Connection tokens are revoked the moment you disconnect, and cannot be used after that.

Working copies of data taken from your file are disposed of no later than two years after their last use, unless a business or legal reason requires us to keep them longer.

How we protect it

• Data is encrypted in transit.
• Connection credentials are encrypted where they are stored.
• Multi-factor authentication is required on the systems we use for this work.
• Access is limited to the staff working on your engagement.
• Activity against your file is logged.
• One named person is responsible for all of it. That person, and how to reach them, is at the foot of this page.

Public records

For charter schools, records we hold on your behalf may be public records under Florida law. We route any request for them through the school rather than answering it ourselves, so that the school can apply the exemptions it is required to apply. Student education records are confidential and exempt, and we do not release them.

If there is a breach

If we determine that a breach affecting your data has occurred, or have reason to believe one has occurred, we will notify you within 10 days. The notice will say what we know, what we are doing about it, and what, if anything, we are asking you to do.

Your requests

You can ask us what we hold about your organization, ask us to correct it, or ask us to delete anything we are not required to keep. Write to either address at the foot of this page. We reply within one business day.

Changes that affect client data

We will tell you in advance of any material change to this part. Where a change would expand how we use your data, we will agree it with you before it takes effect. No change is ever applied retroactively to data we have already handled.

How to reach us

Security, data protection and anything to do with a QuickBooks Online connection go to the named contact below. Everything else can go to the general address.