Superflex Internal Accounting Integration · Superflex Ltd. · Effective September 14, 2026

This Privacy Policy describes how the Superflex Internal Accounting Integration (the “Application”), an internal tool operated by Superflex Ltd. (“Superflex”, “we”, “us”), handles data obtained from QuickBooks Online.

1. Who uses the Application

The Application is used only by authorized Superflex Ltd. personnel. It is not available to the public and does not have external users, customers, or subscribers. The only QuickBooks Online companies it connects to are those owned and controlled by Superflex Ltd. and its affiliated entities.

2. What data is accessed

Through Intuit’s QuickBooks Online Accounting API, the Application reads and writes accounting records in our own QuickBooks Online companies, including vendors, chart-of-accounts entries, bills, vendor credits, bill payments, and attached supporting documents (such as PDF invoices). It also stores the OAuth 2.0 tokens issued by Intuit that authorize this access.

3. How data is stored

The Application runs locally on Superflex Ltd. company computers. OAuth tokens and API credentials are stored in restricted files on those computers and are not transmitted anywhere other than to Intuit’s API endpoints over HTTPS. Accounting data retrieved from QuickBooks Online is used at the time of the request and is not copied to any external database, cloud service, or third party.

4. Sharing

We do not sell, rent, share, or disclose any data obtained through the Application to any third party. Data flows only between Superflex Ltd. computers and Intuit’s QuickBooks Online service.

5. Security

Access to the Application is limited to authorized personnel. Credentials are kept out of source control and are never embedded in shared documents. The Application is configured so that it cannot delete records from QuickBooks Online.

6. Disconnecting and data removal

Access can be revoked at any time by disconnecting the Application from within QuickBooks Online (Apps › My Apps) or from the Intuit Developer portal. Upon disconnection, the locally stored OAuth tokens become invalid and are removed.

7. Changes

We may update this policy from time to time. The effective date above reflects the latest revision.

8. Contact

Superflex Ltd., 400 S Second Street, Elizabeth, NJ 07206, USA · jelbaz@superflex.com