Data processing addendum

Scope and roles

This addendum applies when BufferSol Technologies LLC processes personal data contained in QuickBooks request and response payloads on your behalf. You are the controller and we are the processor. It forms part of the terms of service.

Details of processing

• Subject matter: relaying QuickBooks requests and responses between your application and connected QuickBooks Desktop company files through the Intuit Web Connector. Payloads are stored with each request for 14 days at most (shorter if you set it) and are then deleted.
• Duration: while your account is open, plus the deletion period in the privacy policy.
• Data subjects: your customers who connect a company file, and the people and businesses whose records appear in those company files.
• Data types: whatever records the QuickBooks operations you call contain, plus request metadata (request id, operation, state, timestamps and error codes) and IP address for security.

Our obligations

• We process personal data only on your documented instructions, which are these terms and your use of the service.
• Everyone with access is bound by confidentiality.
• We apply the security measures described on the security page.
• We help you answer data subject requests and meet your security and breach duties, taking into account the nature of processing.
• We notify you without undue delay, and within 72 hours where we can, after becoming aware of a personal data breach.
• On termination we delete or return the data as described in the privacy policy, unless the law requires us to keep it.
• We give you the information you reasonably need to show compliance and allow audits through a written questionnaire once a year.

Subprocessors

You authorize the subprocessors on our subprocessors page. We will give you at least 14 days notice before adding or replacing one, and you may object on reasonable grounds.

International transfers

Where personal data moves from the EEA, UK or Switzerland to a country without an adequacy decision, the Standard Contractual Clauses (module two, controller to processor) and the UK addendum apply and are incorporated here.

Contact and signed copy

To request a countersigned copy, email contact@buffersoltech.com. Our address is 447 W Broadway, 2nd Floor Suite #1964, New York, NY 10013, United States.