Effective Date: September 18, 2026
Charter School Business Management Inc. (“CSBM,” “we,” “us,” or “our”) operates an internal integration between authorized Salesforce and QuickBooks Online environments (“Integration”). This Privacy Policy explains what information the Integration may access, how that information is used, and how it is managed.
- Scope
This policy applies specifically to information processed through Integration. It does not replace other CSBM privacy, employment, records-management, or information-security policies that may apply to CSBM’s general operations.
The Integration is intended for internal CSBM business use and is not offered to the public as a commercial application.
- Information about the Integration May Access
Depending on the authorized configuration and business workflow, the Integration may access or process information stored in CSBM’s QuickBooks Online, Salesforce, and related authorized systems, including:
- Customer, vendor, or account identifiers;
- individual or business names and contact information;
- Invoice, payment, transaction, and revenue information;
- Account balances and reconciliation information;
- Product, service, class, department, or project information;
- Dates, reference numbers, descriptions, and transaction status;
- Records created when information is synchronized between systems;
- Technical information required to operate and secure the Integration, such as authentication tokens, connection status, system logs, timestamps, and error records; and
- Other business or accounting information required for an authorized CSBM workflow.
The Integration is not intended to access information beyond what is reasonably necessary for its authorized business functions.
- How Information Is Used
Information processed through Integration may be used to:
- Synchronize authorized records between QuickBooks Online and Salesforce;
- Support accounting, financial reporting, reconciliation, and revenue tracking;
- Reduce manual entry and maintain consistent business records;
- Investigate errors and provide technical support;
- Monitor the security and reliability of Integration;
- Maintain audit and operational records; and
- Meet applicable accounting, contractual, legal, regulatory, and compliance obligations.
CSBM will not use information obtained through Integration for purposes materially unrelated to these functions without appropriate authorization and notice.
- Authorization and Access
The Integration accesses QuickBooks Online through Intuit’s authorized connection and authentication process. Access is limited to the permissions approved when an authorized CSBM representative connects the Integration.
Access to information is restricted to authorized CSBM personnel and authorized service providers who require it for legitimate business, support, security, or compliance purposes.
- Information Sharing
CSBM does not sell information obtained through Integration.
Information may be shared with:
- Authorized CSBM personnel;
- Intuit and Salesforce as the connected platform providers;
- Technology, hosting, integration, security, or support providers engaged by CSBM;
- Professional advisers, auditors, or insurers when reasonably necessary; or
- Government authorities or other parties, when required by law or necessary to protect CSBM’s legal rights, systems, users, or information.
Service providers are permitted to process information only as necessary to provide authorized services to CSBM and subject to applicable contractual and confidentiality requirements.
- Data Security
CSBM uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, alteration, disclosure, loss, or destruction.
These safeguards may include access restrictions, authentication controls, role-based permissions, logging, monitoring, vendor-management controls, and secure transmission or storage measures appropriate to the systems involved.
No electronic system can be guaranteed to be completely secure. CSBM reviews and updates safeguards based on operational needs, identified risks, and applicable requirements.
- Data Retention and Deletion
CSBM retains information processed through Integration only for as long as reasonably necessary to:
- Perform the purposes described in this policy;
- Maintain appropriate business and accounting records;
- Meet contractual, legal, regulatory, audit, tax, or security requirements; and
- Establish, exercise, or defend legal rights.
Retention periods may vary based on the type of record and the system in which it is maintained.
If the QuickBooks Online connection is disconnected, CSBM will revoke or remove associated access credentials and tokens as appropriate. Information previously transferred to Salesforce or another authorized CSBM system may remain there when continued retention is required for legitimate business, accounting, legal, audit, or security purposes.
Information that is no longer required will be deleted, anonymized, or securely disposed of in accordance with CSBM’s applicable procedures and the capabilities of the relevant systems.
- Individual Requests
To the extent provided by applicable law, an individual may request information about personal information maintained by CSBM or request access, correction, or deletion.
Certain records may need to be retained when required for accounting, legal, contractual, security, or other legitimate purposes. Requests may be subject to identity verification and applicable legal exceptions.
Requests should be sent to Pr*****@**bm.com with the subject line Privacy Request – QBO Integration.
- Third-Party Platforms
QuickBooks Online and Salesforce process information under their own applicable terms, privacy notices, and security practices. CSBM encourages authorized users to review the policies of those providers.
This Integration is independently operated by CSBM and is not sponsored or endorsed by Intuit or Salesforce.
- Children’s Information
Integration is an internal accounting and business application and is not directed to children. CSBM does not intentionally use Integration to collect information directly from children.
Business records should not be interpreted as anonymous merely because the Integration is internal. Accounting records may contain names, contact information, transaction details, or other information associated with identifiable individuals.
- Changes to This Policy
CSBM may update this policy when its Integration, information practices, service providers, or legal and operational requirements change. Updates will be posted on this page with a revised effective date.
- Contact
Questions, concerns, or requests relating to this policy or the Integration may be directed at:
Charter School Business Management Inc.
Email: he**@**bm.com Website: https://csbm.com
