ClearCloud Privacy Policy

Effective date: July 18, 2026

ClearCloud is a self-hosted, single-tenant internal tool. It is installed
and run by a single individual or organization (the “operator”) on their own
server, for their own internal use. There is no multi-tenant service, no
ClearCloud-operated cloud backend, and no account system for outside users.
This policy explains what data this specific instance of ClearCloud touches
and how it is handled.

What data this app touches

• Pax8 invoice data — distributor invoices, line items,
  and related billing metadata pulled from the operator’s own Pax8 account
  via the Pax8 API.
• QuickBooks Online accounting data — accessed via
  Intuit’s APIs, to create and read Bills, Vendors, Vendor Credits, and
  related accounting records in the operator’s own QuickBooks Online
  company.
• Bank and card transaction data — retrieved via
  SimpleFIN Bridge for the operator’s own linked bank and card accounts, to
  power a spend dashboard.

Where data is stored

All data ClearCloud touches — invoices, accounting records, bank
transactions, and connection credentials — is stored in a local database on
the operator’s own server. ClearCloud does not transmit this data to any
ClearCloud-operated service, because no such service exists: the operator’s
server is the only place the application runs.

No selling or sharing

Data is never sold, rented, or shared with third parties. The only
network connections this application makes are the ones the operator
configures — to Pax8, to Intuit’s QuickBooks Online APIs, and to SimpleFIN
Bridge — solely to perform the invoice-sync and spend-dashboard functions
described above.

Intuit platform

ClearCloud connects to QuickBooks Online using OAuth2. Access is used
only to create and read the accounting records (Bills, Vendors, Vendor
Credits, and attachments) that the operator directs it to create — nothing
else is read or written. OAuth tokens are encrypted at rest on the
operator’s server and are never logged in plaintext. The operator can revoke
ClearCloud’s access at any time by disconnecting the QuickBooks connection
from ClearCloud’s Settings page, or by revoking the app’s authorization
directly from the Intuit account.

Data retention

Retention is entirely operator-controlled. Data persists for as long as
the operator keeps this instance running with its database intact, and is
deleted when the operator deletes it — including by decommissioning the
server or its data volume.

Contact

This instance of ClearCloud is operated by its owner. Questions about
this policy, or about the data this instance holds, should be directed to
the operator running it.