Privacy Policy
This policy explains what the PlanSmart software (the "Software") does with information, including the information it reads from and writes to QuickBooks Online when you connect it. The short version: the Software runs on your own computers, keeps your data in your own folders, talks to QuickBooks Online only on your instruction and only from your computer, and PlanSmart has no server that ever sees your data.
1. Where your data lives
The Software is installed on your computers and runs there. The files it creates - plan sets you load, takeoffs, estimates, proposals, change orders, invoices, purchase orders and the settings behind them - are written to folders you choose (for example your company's shared Team Files folder in OneDrive). The Software's own settings and its connection tokens are kept in the application-data folder of the user account on that computer. PlanSmart does not operate any server, cloud database or account system, and none of your data is transmitted to PlanSmart.
2. QuickBooks Online
If you choose to connect the Software to your QuickBooks Online company, the connection is authorized by you through Intuit's sign-in and consent page (OAuth 2.0). The Software never sees your QuickBooks password. Intuit gives the Software an access token and a refresh token, which are stored in the application-data folder on your computer, readable only by your user account, and are never copied anywhere else. The tokens are used only to make requests to Intuit's QuickBooks Online API directly from your computer.
With your permission (the QuickBooks Online Accounting scope), and only when you click the corresponding command in the Software, it:
- reads your company information; customers, sub-customers and projects; products and services (items); vendors; estimates, invoices and purchase orders on a project; the Profit and Loss report filtered to a project; time activities and the list of active employees (to count crews);
- writes customers and projects (created when they do not exist yet), estimates, invoices, purchase orders and vendors - exactly the records you see in the Software before you push them.
What the Software reads from QuickBooks Online is shown to you in the Software and saved in the job's own finance record in your folders, next to the job's other files. It is not sent to anyone else. The Software does not read payroll, banking, payment-card or tax-filing data.
You can disconnect at any time: in the Software, Settings › QuickBooks › Disconnect revokes the tokens with Intuit and deletes them from your computer; or in QuickBooks Online, under Apps › My Apps, remove PlanSmart. After that the Software can no longer reach your company file until you connect it again. Intuit's handling of your QuickBooks data is governed by Intuit's own privacy statement.
3. Other connections the Software can make
Claude (optional). If you enter your own Anthropic API key in the Software's settings, the questions you type in its Claude tab and the parts of the job needed to answer them (quantities, item names, plan excerpts) are sent to Anthropic's API under your account and Anthropic's terms and privacy policy. Without a key, nothing is sent to Anthropic. Updates (optional). If an update feed is configured, the Software asks that feed (a GitHub repository) which releases are available; the request carries the Software's version and no job data. Nothing else. The Software has no analytics, telemetry, advertising or tracking of any kind.
4. Information we collect
PlanSmart collects no personal information through the Software. This website is a set of static pages; it sets no cookies and runs no analytics. It is hosted by GitHub Pages, which may record standard server logs (such as IP addresses) under GitHub's privacy statement. If you email us, we keep the correspondence to answer you.
5. Sharing and selling
We do not sell, rent or share your data with anyone. Data moves only between your computer and the services you connect (Intuit, and Anthropic if you choose), on your instruction.
6. Security
Connection tokens and API keys are stored in the application-data folder on your computer with access limited to your user account. All connections to Intuit and Anthropic use HTTPS with certificate verification. Because the Software and its files live on your computers and in your own file-sharing service, their security also depends on how you secure those - your sign-ins, your disks and your sharing settings.
7. Retention and deletion
Your files stay for as long as you keep them; delete a job's folder and it is gone. Disconnecting QuickBooks deletes the tokens. Uninstalling the Software removes its program files; the application-data folder and your job folders are yours to keep or delete.
8. Children
The Software is business software and is not directed to children under 13. We do not knowingly collect information from children.
9. Changes
If this policy changes, the new version is posted at this address with a new effective date.
10. Contact
Questions about privacy: [email protected].