ReportCraft Privacy Policy

page-template-default,page,page-id-16514,page-child,parent-pageid-16512,bridge-core-3.0.1,qodef-qi--no-touch,qi-addons-for-elementor-1.5.6,qodef-back-to-top--enabled,,qode-essential-addons-1.4.8,qode-page-transition-enabled,ajax_fade,page_not_loaded,side_area_uncovered_from_content,qode-theme-ver-28.7,qode-theme-bridge,disabled_footer_top,disabled_footer_bottom,qode_header_in_grid,wpb-js-composer js-comp-ver-6.10.0,vc_responsive,elementor-default,elementor-kit-15999

ReportCraft Privacy Policy

Effective date: April 15, 2026

This policy describes how ReportCraft (“the Software”), operated by Crafted Earth, Inc. (“Crafted Earth”, “we”, “us”), handles data. Because ReportCraft is a single-user internal tool used only by the principal of Crafted Earth, Inc., this policy is written for the benefit of third-party API providers (including Intuit, Inc.) who require it as a condition of API access, and for transparency.

1. Who operates ReportCraft

Crafted Earth, Inc., a California corporation headquartered in San Rafael, California, USA. Contact: eric@craftedearth.com.

2. What data ReportCraft accesses

ReportCraft accesses financial and operational data from the QuickBooks Online company file owned by Crafted Earth, Inc. This data includes, but is not limited to, vendor records, bill records, payment records, purchase orders, invoices, and general ledger entries belonging to Crafted Earth, Inc.

ReportCraft does not access any QuickBooks company file other than the one owned by Crafted Earth, Inc. It does not collect, process, or store data belonging to any other party.

3. How data flows

When an authorized user of Crafted Earth, Inc. runs a report, ReportCraft requests the relevant data from the QuickBooks Online API over an authenticated TLS connection, processes the data in memory on the user’s local workstation, and presents the result to the user. Data is not transmitted to any third-party server at any point in this process.

4. What ReportCraft stores

The only piece of user data persisted by ReportCraft is an OAuth 2.0 refresh token issued by Intuit, Inc. This token allows the Software to re-authenticate to the QuickBooks Online API without prompting the user for credentials on every run. The refresh token is stored in a local environment file on the authorized user’s workstation, outside of any version control system or cloud backup, and is readable only by the local operating system user account.

ReportCraft does not store QuickBooks financial data to disk. Reports are rendered in memory and displayed to the user; no persistent copy is created by the Software.

5. Third-party recipients

Crafted Earth, Inc. does not share, sell, rent, lease, or otherwise disclose any data accessed by ReportCraft to any third party. ReportCraft has no backend servers, no analytics providers, no advertising partners, and no telemetry.

6. Your rights and controls

The authorized user of ReportCraft may revoke the Software’s access to QuickBooks Online at any time by:

Logging into QuickBooks Online, opening the Apps → Connected Apps screen, locating ReportCraft, and clicking Disconnect; or
Deleting the local environment file containing the refresh token from the workstation.

See How to disconnect ReportCraft for step-by-step instructions.

7. Data retention

Because ReportCraft does not persist QuickBooks data to disk, there is no retention period for financial data. The only persistent artifact is the OAuth refresh token described in Section 4, which is retained until the authorized user revokes access or deletes the local environment file.

8. Security

All API traffic between ReportCraft and Intuit occurs over TLS 1.2 or higher. Credentials are stored only in a local environment file on the authorized user’s workstation, outside of any version control system or cloud backup, and the file permissions are restricted to the local user account. The workstation itself is protected by operating system authentication and full-disk encryption.

9. Children

ReportCraft is not directed at children. It does not knowingly collect data from any individual, and is used only by a single adult authorized user of Crafted Earth, Inc.

10. Changes to this policy

If this policy changes, the updated version will be published at this URL. The effective date at the top of the page will reflect the date of the most recent change.

11. Contact

Questions or requests regarding this policy may be sent to:

Crafted Earth, Inc.
San Rafael, California, USA
eric@craftedearth.com

ReportCraft Privacy Policy