Privacy Policy

1. Scope

This Policy applies to business contact information processed through the Application. It does not apply to any other website, product, or service Company may operate, and it does not apply to information Intuit collects and processes under its own privacy policy in connection with QuickBooks Online.

2. Information We Collect

The Application processes business contact information relating to individuals employed by or affiliated with the businesses Company works with, which may include:

• Name, job title, and employer/company name;
• Work email address and work telephone number;
• Business mailing address, where applicable;
• Notes on the business relationship (for example, membership or work group participation history) entered by Company personnel; and
• Corresponding customer or vendor records imported from QuickBooks Online through the Application’s integration with that platform.

The Application does not knowingly collect personal information unrelated to an individual’s business role, such as personal email addresses, personal phone numbers, or home addresses, and is not designed to collect sensitive categories of personal information.

3. Sources of Information

Company obtains this information directly from the individual in the course of a business relationship (for example, a business card, email signature, or introduction), from the individual’s employer or from public business sources, and from QuickBooks Online records Company already maintains, which are imported into the Application through its integration with that platform.

4. How We Use Information

Company uses business contact information to manage its business relationships and internal sales, vendor, or account-management processes; to communicate with contacts regarding the business relationship; to keep the Application’s records consistent with Company’s QuickBooks Online accounting records; and for internal recordkeeping, reporting, and business-operations purposes. Company does not use this information to make automated decisions producing legal or similarly significant effects, and does not use it for purposes unrelated to Company’s business relationship with the individual or their employer.

5. Marketing Communications

The Application is used to send both (a) non-marketing communications directly related to Company’s business relationship with a contact, such as account, membership, or transaction-related messages, and (b) marketing communications, which Company sends using a third-party email marketing platform, Constant Contact. Company sends marketing communications only where it has an appropriate legal basis to do so under applicable law — which may be the recipient’s consent, an existing business or membership relationship, or another recognized basis — and complies with applicable marketing-communication laws, including Canada’s Anti-Spam Legislation (CASL), the U.S. CAN-SPAM Act, and EU/UK rules governing electronic marketing. Every marketing message includes a way to unsubscribe or opt out, and Company honors opt-out requests promptly. Opting out of marketing communications does not opt a contact out of non-marketing communications necessary to the business relationship.

6. How We Share Information

Company does not sell business contact information and does not share it with third parties for their own independent marketing purposes. Company may share information with:

• Service providers who host or support the Application’s infrastructure, acting on Company’s instructions and subject to confidentiality and data-protection obligations;
• Constant Contact, Inc., as Company’s email marketing service provider, solely to deliver the marketing communications described in Section 5;
• Intuit, solely as necessary to operate the QuickBooks Online integration and consistent with Intuit’s own developer terms and privacy practices; and
• Third parties where required by law, legal process, or to protect Company’s rights, or in connection with a merger, acquisition, or sale of business assets.

Company has, or will put in place, data processing terms with these service providers governing their handling of personal information, consistent with applicable law.

7. International Data Transfers

Company is based in the United States, and business contact information is generally stored and processed there. Some contacts whose information Company processes are located outside the United States, including in the European Economic Area, the United Kingdom, Canada, and Brazil. Where required by applicable law — including the EU and UK General Data Protection Regulation (GDPR), Brazil’s Lei Geral de Proteção de Dados (LGPD), and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) — Company will implement appropriate safeguards for transferring personal information to the United States, such as standard contractual clauses or another legally recognized transfer mechanism.

8. Data Retention

Company retains business contact information for the duration of its business relationship with the relevant contact or their employer, and for 24 months after that relationship becomes inactive (for example, after the last substantive interaction with the contact), after which the information is deleted or de-identified, unless a longer period is required by law, necessary to establish, exercise, or defend legal claims, or otherwise necessary for a legitimate business purpose. A contact who unsubscribes from marketing communications is removed from Company’s marketing lists promptly, though Company may retain a record of the opt-out itself as needed to honor it.

9. Data Security

Company maintains reasonable administrative, technical, and physical safeguards designed to protect business contact information against unauthorized access, use, or disclosure. No method of storage or transmission is completely secure, and Company cannot guarantee absolute security.

10. Your Privacy Rights — U.S. State Law

Depending on where an individual is located, U.S. state law may provide rights with respect to business contact information Company holds, which may include the right to know what information Company has, to request access to or a copy of it, to request correction or deletion of it, to object to or restrict certain processing, and to lodge a complaint with a state regulator. Company does not sell or share business contact information for cross-context behavioral advertising, and does not discriminate against any individual for exercising applicable privacy rights. To make a request, contact Company using the information in Section 14.

11. Your Privacy Rights — EU, UK, and Brazil

For individuals located in the European Economic Area, the United Kingdom, or Brazil, Company processes business contact information on the basis of its legitimate interests in maintaining and managing its business relationships, or, where applicable, the performance of a contract or the individual’s consent. Subject to the conditions and exceptions under applicable law, such individuals may have the right to access, correct, or delete their information; to restrict or object to certain processing; to receive a copy of their information in a portable format; to withdraw consent where processing is based on consent; and to lodge a complaint with the relevant supervisory authority — for example, the Information Commissioner’s Office in the UK, the individual’s national data protection authority in the EU, or Brazil’s Autoridade Nacional de Proteção de Dados (ANPD). To exercise these rights, contact Company using the information in Section 14.

12. Children's Information

The Application is a business tool not directed to children, and Company does not knowingly collect information about children through the Application.

13. Changes to This Policy

Company may update this Policy from time to time. The version posted at the URL provided to Intuit and made available to Company personnel is the version then in effect. Material changes will be indicated by updating the effective date above.

14. Contact Us

Questions about this Policy, or requests regarding business contact information, may be directed to Reed Luhtanen / CEO at info@fasterpaymentscouncil.org.