Privacy Policy

This Privacy Policy describes how Highland Holdings (“we”, “us”) collects, uses, and safeguards information in connection with the Highland Holdings Cash Flow application (the “Application”), an internal treasury tool used to produce consolidated 13-week cash flow projections for Highland Holdings and its affiliated entities.

The Application is not a consumer product. It is made available only to authorized Highland Holdings personnel and is not offered to the general public.

Information we collect

Account information. When an authorized user account is created, we store an email address and a cryptographically hashed password. We do not store passwords in plain text.

QuickBooks Online data. When you connect a QuickBooks Online company, we access financial records through Intuit’s API using the com.intuit.quickbooks.accounting scope. This includes chart of accounts, account balances, transactions, invoices, bills, and related accounting records for the connected company. We request read access only for the purpose of producing cash flow projections.

OAuth credentials. We store the access and refresh tokens issued by Intuit, together with the company (realm) identifier, so the Application can refresh data without repeated sign-in.

User-entered data. Planned cash events entered in the Application are stored with the identity of the user who created or modified them, along with a change log.

How we use information

Information is used solely to operate the Application: to authenticate users, retrieve accounting data from connected QuickBooks Online companies, categorize transactions, and generate consolidated cash flow projections and reports for internal financial management.

We do not sell, rent, or trade any information. We do not use QuickBooks Online data for advertising, marketing, or profiling, and we do not share it with third parties except as described below.

Storage and security

The Application and its database run on infrastructure controlled by Highland Holdings hosted with Amazon Web Services. Data in transit is protected with TLS. OAuth tokens are encrypted at rest. Access to the Application requires an authenticated account, and access to the underlying server is restricted to authorized administrators.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data sharing

We share information only with service providers necessary to operate the Application — specifically Intuit (as the source of QuickBooks Online data) and our cloud hosting provider. We may disclose information where required by law or to protect our legal rights.

Retention and deletion

Accounting data and projections are retained for as long as the Application is in use for financial management purposes. You may disconnect a QuickBooks Online company at any time from the Connections page; doing so revokes the stored tokens and stops further data retrieval. To request deletion of stored data or an account, contact us at the address below.

Your choices

Authorized users may request access to, correction of, or deletion of information held about them. Connection of a QuickBooks Online company is voluntary and revocable at any time, both within the Application and from within QuickBooks Online itself.

Changes to this policy

We may update this Policy from time to time. The effective date above reflects the most recent revision. Material changes will be communicated to authorized users.

Contact

Questions about this Policy may be directed to anson.scoville@highlandholdings.com.