Privacy Policy

Who uses the App

The App is not offered to the public. Access is limited to Regius personnel and associates who receive an account from an administrator. Each account has a role that limits what it can see and do; associates only see the clients they refer.

Data we handle

• User accounts: name, email address, role, sign-in records and a log of actions taken in the App (for example, creating a client or issuing an invoice).
• Client business data entered by our staff: company name, sector, country and jurisdiction, legal address, tax and registration identifiers, contact email, and the name, position and identification details of the client’s authorized signatory.
• Engagement data: descriptions of client needs, analyses, estimates, invoice concepts, deliverables and contracts.
• QuickBooks Online data described in the next section.

QuickBooks Online

An administrator of the Regius QuickBooks Online company connects it to the App through Intuit’s OAuth authorization, with the accounting scope only. Once connected, the App:

• Reads the company name, the sales tax preference, the list of income accounts, and customers and products/services that match the clients and services being invoiced.
• Creates or updates customers for our clients, creates one service item per catalog service, and creates invoices that our staff explicitly request. For customers that already existed in QuickBooks, the App only fills in fields that are empty.
• Stores the QuickBooks company ID and name, the OAuth tokens, the income account chosen for services, and the QuickBooks IDs and numbers of the customers and invoices it created or linked.

The App does not access bank feeds, payments, payroll, reports or any other QuickBooks data, and does not modify or delete existing invoices. OAuth tokens are encrypted at rest (AES-256-GCM) and are used only by the App’s server; they are never shown to users or sent to a browser.

The connection can be ended at any time from Admin > QuickBooks in the App, which revokes the tokens with Intuit and deletes them, or from the Apps section of QuickBooks Online. Records already created in QuickBooks stay in QuickBooks under the company’s control.

How we use data

• To provide the App’s functions to our staff: analysis, estimates, billing, deliverables and contracts.
• To keep our client records and invoicing consistent between the App and QuickBooks Online.
• To verify client companies, collect contract signatures and notify our staff of relevant events.
• To secure the App and keep an audit trail of who did what.

We do not sell data, use it for advertising, or share it with data brokers.

Service providers

The App relies on the following providers, each processing data only to deliver its service to us:

• Vercel: application hosting.
• Supabase: database and user authentication.
• Anthropic: AI models that draft analyses, invoice concepts, deliverables and translations from the engagement data our staff provide.
• Intuit (QuickBooks Online): accounting and invoicing.
• ComplyCube: verification of client companies.
• DocuSign: electronic signature of contracts.
• Resend: email notifications to our staff.

Cookies

The App uses only cookies that are strictly necessary: the sign-in session and a short-lived cookie that protects the QuickBooks connection flow. Your light or dark display preference is kept in your browser. There are no analytics or advertising cookies.

Security and retention

The App is served only over HTTPS. Access is restricted by role and every relevant action is logged. We keep data for as long as needed to serve our clients and to meet our legal, accounting and tax obligations, and then delete it.

Your requests

To ask about, correct or delete data about you or your company, contact us at [pending: contact email]. We may need to keep certain records where the law requires it.

Changes and contact

We will update this page when our practices change and revise the date above. Regius Advisory Group LLC, [pending: registered address]. Email: [pending: contact email].