Privacy Policy

1. Who operates Sitaji.ai

Sitaji.ai is operated by [PLACEHOLDER: legal name of service operator] (“Sitaji.ai,” “we,” or “us”). Contact: [PLACEHOLDER: privacy contact email]. Mailing address, if required for your business or applicable law: [PLACEHOLDER: business mailing address]. No legal entity details have been supplied for this policy.

2. Information we collect

• Account and workspace information: name, email address, organization name, role, and password hash used to operate accounts and workspaces.
• Workflow information: task records and details, assignments, status and task history, team invitations, and related workspace information that users create or the service generates.
• QuickBooks information, if connected: company name and identifier, and accounting records needed for the requested workflow features. Depending on features used, this can include invoice, bill, customer, vendor, account, transaction, tax, and attachment-reference information. The service uses records to show summaries and identify possible accounting workflow tasks.
• Technical information: authentication/session cookie data, service request and error information, and operational logs generated by the backend. The application does not intentionally place QuickBooks OAuth tokens in browser code or ordinary API responses.

3. How information is used

We use information to create and secure accounts, provide workspace and team features, connect to QuickBooks Online at your direction, retrieve company and accounting information, identify and display possible workflow tasks, maintain task assignments and status, troubleshoot service errors, and protect the service. Sitaji.ai’s implemented QuickBooks access is read-oriented for accounting records; it does not write accounting transactions to QuickBooks.

4. QuickBooks authorization and disconnection

When you connect a company, Intuit handles sign-in and authorization. Sitaji.ai receives OAuth tokens and stores them encrypted in its backend database to make authorized API requests and refresh access when required. Tokens are restricted to backend use. You can disconnect from the QuickBooks page in your signed-in dashboard. The current implementation asks Intuit to revoke the refresh token and then deletes the local QuickBooks connection and tokens. If revocation fails, deletion may not complete and you should retry or contact the operator. Disconnection does not currently delete workflow task records already created in Sitaji.ai.

5. Storage, security, and retention

Account, workspace, connection, and workflow records are stored in the service database. OAuth access and refresh tokens are encrypted by the backend before storage. The service uses authenticated, organization-scoped access and secure session-cookie settings in production. No system can be represented as completely secure; we do not make a guarantee that unauthorized access is impossible.

We retain information while needed to provide the service, maintain workspace records, meet legitimate operational needs, or comply with law. QuickBooks tokens and connection metadata are removed after successful disconnection; derived workflow tasks may remain. The service currently has no self-service account deletion flow. Ask the service operator using the privacy contact placeholder below about access, correction, deletion, or other privacy requests and applicable retention.

6. Sharing

We share information with Intuit as needed to perform the QuickBooks integration you authorize. Information is also accessible to members of your Sitaji.ai organization according to workspace roles and features. Hosting, database, and operational service providers may process information to run Sitaji.ai on the operator’s behalf. We do not describe or promise any sale of personal information in this policy. Information may also be disclosed where required by law or needed to protect the service and its users.

7. Your choices and rights

You can manage team and workflow information through available workspace features and disconnect QuickBooks as described above. Depending on your location, you may have rights to request access, correction, deletion, or restriction of personal information. Contact the operator to make a request. You may also manage or revoke the integration through Intuit’s account and authorization controls. Disconnecting may limit connected features.

8. Children, external services, and changes

Sitaji.ai is a business workflow service and is not designed for children. QuickBooks Online and other external services are subject to their own privacy policies and terms. We may update this policy by posting a new version here and changing the date above.

9. Contact

Privacy questions and requests: [PLACEHOLDER: privacy contact email]. Service operator: [PLACEHOLDER: legal name of service operator]. Mailing address, if required: [PLACEHOLDER: business mailing address].