Privacy Policy

Effective date: October 8, 2026

This policy describes the intended handling of information through Horizonline Logistics' private Hermes Agent integration with QuickBooks Online (the “Integration”). This draft must be reviewed and aligned with actual deployment practices before it is published as a final policy.

1. Scope and purpose

The Integration is intended for authorized internal business users to retrieve and understand QuickBooks Online accounting information through an AI-assisted interface. It is not a public accounting service.

2. Information processed

Depending on the permissions granted and features enabled, the Integration may process company identifiers, customer and vendor records, invoices, bills, expenses, payment status, account balances, transaction details, and financial reports. It may also process user prompts, authentication metadata, and diagnostic information.

3. Access to QuickBooks

Access is authorized using Intuit OAuth 2.0. The Integration should request only necessary scopes, restrict access to authorized personnel, and store credentials and tokens securely. Authorization can be revoked through the applicable Intuit connection controls.

4. AI processing and service providers

User questions and relevant portions of accounting data may be sent to the AI model provider configured for Hermes Agent to generate responses. The provider, hosting location, retention terms, and training settings depend on the deployed configuration and must be verified and disclosed before production use. QuickBooks data must not be used to train or fine-tune AI models unless expressly permitted by applicable agreements and authorized.

5. Use and disclosure

Information is used to fulfill authorized accounting requests, provide responses, maintain the Integration, and investigate operational or security issues. Access should be limited to authorized personnel and service providers necessary to operate the Integration. No sale of QuickBooks data is intended.

6. Security

Reasonable safeguards should include encrypted transport, access controls, secret management, restricted logs, and prompt-injection protections. No internet-connected service can guarantee absolute security.

7. Retention and deletion

Retention periods for prompts, logs, tokens, and any cached QuickBooks data must be set according to operational needs, provider terms, and applicable law. Authorized administrators should be able to revoke the connection and delete stored data where legally and technically permitted. Before publishing: confirm and document the actual retention schedule and deletion contact/process.

8. Rights and inquiries

Requests concerning company data, access, correction, or deletion should be directed to Horizonline Logistics through its official website. Before publishing: add a monitored privacy contact email address.

9. Updates

This policy may be updated to reflect changes to the Integration or applicable requirements. The effective date will be revised when material changes are made.

QuickBooks is a product of Intuit Inc. Horizonline Logistics is not affiliated with or endorsed by Intuit.