Effective 25 September 2026.
Carve Consulting Inc. ("Carve", "we") is a finance consultancy incorporated in British Columbia, Canada. Carve is the developer and operator of Carve Forecast Sync. Carve accesses QuickBooks data only on the instruction and behalf of the company that authorises the connection. That company remains the owner of, and the party responsible for, its accounting data and any personal information in it; Carve acts as its service provider. Contact: sam@carvefinance.com.
Carve Forecast Sync connects to a QuickBooks Online company that its administrator has explicitly authorised, and reads accounting reports and records: profit and loss and balance sheet by month, trial balance, general ledger, chart of accounts, company preferences, supplier and customer balances with ageing, the open bills and invoices behind those balances, and profit and loss by project where the company uses QuickBooks projects. Access is read-only. The tool never creates, edits or deletes anything in QuickBooks.
We do not collect data from any company that has not authorised the connection, and we do not use QuickBooks data for advertising, profiling, benchmarking across companies, or training of any model.
Downloaded data is written into a local database file on the Carve operator's workstation and used to build the forecast model. Tokens and downloaded reports are stored on the Carve operator's workstation (full-disk encryption enabled; token file readable only by the operator account, not otherwise encrypted) and, where a hosted database is used, a Supabase project in a Canadian region with row-level access restricted to the Carve operator. They are never stored on a Carve web server. Static pages are served by Vercel. No QuickBooks data is stored on this website.
Accounting data is shared only with the company it belongs to and with people that company authorises to receive its financial forecast. We do not sell or rent data. We disclose data only where required by law.
Reports are retained while the forecasting engagement is active and deleted within 30 days of the engagement ending or of a written request from the company. Disconnecting the app in QuickBooks (see Connect) revokes our access immediately; the Tool deletes its stored token automatically the next time it runs and Intuit reports the grant invalid, and we delete any remaining copies on request.
Credentials are never hard-coded and are stored outside source control. Tokens are refreshed only when they expire and the latest refresh token is always persisted. Transport is HTTPS only. Access is limited to the Carve operator.
The authorised company may ask at any time what data we hold, request a copy, request correction or deletion, or revoke access. Write to sam@carvefinance.com. We answer within 30 days. This policy is governed by the laws of British Columbia and Canada, including PIPEDA and the BC Personal Information Protection Act.
We will post any change to this page with a new effective date.