Last updated September 26, 2026

Privacy

Hugg-A-Planet Books is a private integration run by Hugg-A-Planet (World Peace Enterprises LLC) for its own QuickBooks Online company. It is not a public product. This page explains what it touches, why, and who else is involved. The short version: it only works with Hugg-A-Planet's own books, it keeps the connection keys on the server, it does not keep copies of the books, and it does not sell or share data.

Who uses it

Only Hugg-A-Planet's owners and the people they authorize to help keep the company's books use this integration. It connects only to Hugg-A-Planet's own QuickBooks Online company. It is not offered to other QuickBooks users, and there are no customer accounts or sign-ups. If another company owned by the same owners is ever connected, this page will be updated first.

What it can access

When an admin of Hugg-A-Planet's QuickBooks company approves the connection on Intuit's own sign-in screen, Intuit lets this integration use the QuickBooks Online Accounting API for that company. That covers accounting records such as company details, the chart of accounts, customers, vendors, products and services, estimates, invoices, bills, payments, other transactions, and financial reports.

Those records can include personal information about Hugg-A-Planet's customers and vendors (for example names, email addresses, phone numbers, addresses and amounts), because that is what bookkeeping contains. The integration does not ask for or use QuickBooks Payments, payroll, or bank login credentials.

How the data is used

• To let Hugg-A-Planet look up and analyze its own books: reports such as profit and loss, balance sheet and general ledger, transaction lists, and account balances, including for year-end work with the company's accountants.
• To help with ordinary bookkeeping when the owner asks. Anything that would contact a customer (such as emailing an invoice) happens only on an explicit request.
• The integration has no delete operations.

QuickBooks data is read from Intuit when a request is made and handed back to the person or assistant tool that asked. The integration does not keep a copy of the books.

What is stored

The server stores only what it needs to stay connected: the OAuth access and refresh tokens Intuit issues, the QuickBooks company ID (realm ID), a short label the owner chose (for example "hap"), the company name, and timestamps. These are kept in Cloudflare Workers KV, are never sent to a browser, and are never written to logs. Disconnecting deletes the stored tokens.

The integration's own code logs only technical details such as status codes and Intuit's support reference IDs, never tokens or bookkeeping data. Cloudflare, which hosts the site, keeps its own standard request logs (for example IP address, browser type and the page requested).

Who else handles data

• Intuit (QuickBooks Online) holds the books and handles sign-in and approval. See the Intuit Global Privacy Statement.
• Cloudflare hosts this site and the integration code and stores the connection tokens.
• Hugg-A-Planet's own AI assistant tools. The owner can connect assistant software (through a private, token-protected endpoint) so it can read or work with the books on the company's behalf. Results go to that assistant, which processes them under its provider's own terms and privacy policy. No assistant can use the integration without the owner's private token.

Data is not sold, rented, or shared for advertising. It may be shared with Hugg-A-Planet's accountants or advisors, or when the law requires it.

Cookies

The public pages set no cookies and load no trackers, analytics, or third-party fonts. The owner-only connect step sets one short-lived, HttpOnly security cookie that protects the sign-in handoff with Intuit and expires within ten minutes.

Disconnecting and deletion

The connection can be ended at any time from inside QuickBooks (Apps, or Settings → Manage apps) or by the owner from the integration's owner-only disconnect page. Disconnecting stops access and deletes the stored tokens; it does not change anything in QuickBooks.

Security

All traffic uses HTTPS. The owner-only pages need a long random key, and the assistant endpoint needs a separate long random token. Intuit's app keys and these secrets are stored as encrypted Cloudflare secrets, not in source code.

Changes

If the integration starts handling data differently, this page and the date at the top will be updated.

Contact

Hugg-A-Planet (World Peace Enterprises LLC) · Florida · patforenza@gmail.com