Who operates this service
Template Generator is operated by Woolf IT Solutions LLC, a Florida limited liability company located in Winter Haven, Florida. Woolf IT Solutions LLC is the entity responsible for the data described here and is the party you are contracting with.
Contact: kevin@woolfitsolutions.com, (863) 349-3403.
What this service is
Template Generator connects to a QuickBooks Online company that you authorize, reads estimate and invoice records from it, renders them onto a document template your business has approved, and delivers the resulting PDF by email or download.
What we access
When you authorize the connection, we request the QuickBooks Online Accounting scope through Intuit's Accounting API. That is the only scope Intuit offers for this data, and it permits both reading and writing. We use it only to read. We read only what is needed to produce a document:
- Estimate and invoice records, including line items, quantities, rates, totals, tax, dates, reference numbers and the customer message on the record.
- The customer name, the billing address, the job site address and the customer's email address attached to that record. The email address only fills in the To line when you choose to email a document, and you can change it before anything is sent.
- Your company profile: business name, address, phone number and website.
Intuit returns the whole record. Fields not listed here, such as internal notes and custom fields, arrive with it and are not kept. A few of them steer the layout, such as the kind of line and whether it is taxable, and none of them is shown on a document or stored. Development and testing use Intuit's sample company, never your data.
This service does not create, change or delete anything in your QuickBooks company. The software sends read requests only.
What we do not access
- Payroll records and employee data.
- Bank account numbers, card numbers or banking credentials.
- Your Intuit username or password. Authorization happens on Intuit's own sign-in page and we never see your credentials.
What we store, and for how long
- Connection tokens. The OAuth access and refresh tokens Intuit issues for your company, stored encrypted. Kept until you disconnect, then deleted.
- Who is signed in. When someone at your business signs in with their Microsoft 365 work account, Microsoft tells us their name and email address. They are kept only in a sign-in cookie in that person's browser, which ends when they sign out or after 12 hours.
- Your template and image assets. The approved layout, logos and badges for your business, and the email signatures of the people who send documents from it. Kept while you are a customer.
- Estimate content. Read at the moment a document is generated and held only as long as needed to render and deliver that document. It is not retained as a copy of your accounting records.
- Delivery records. A log of which document was generated and where it was sent, retained for up to 12 months so we can answer questions about whether something went out.
Who else sees it
We do not sell your data, rent it, or use it for advertising. We do not use your accounting data to train machine learning models. Data is shared only with the service providers needed to run the tool:
- Intuit Inc. Source of the estimate data, under the authorization you grant.
- Vercel Inc. Application hosting.
- Microsoft Corporation. Sign-in with your business's Microsoft 365 accounts, and email delivery through Microsoft 365 when you choose to send a document by email.
We may disclose information if required by law or valid legal process.
Security
Connections use HTTPS. Tokens are stored encrypted at rest. Access to production systems is limited to Woolf IT Solutions personnel who need it. No system is perfectly secure, and we do not claim otherwise. If a breach affects your data, we will notify you without undue delay.
Your choices
- Disconnect at any time, from inside QuickBooks Online under Apps, or by asking us. Disconnecting deletes the stored tokens.
- Request deletion of your template, assets and delivery records by emailing the address above. We will complete the request within 30 days.
- Request a copy of what we hold about your business, same address.
Children
This is a business tool. It is not directed to children and we do not knowingly collect information from anyone under 18.
Changes
If this policy changes in a way that affects how your data is handled, we will update the date at the top and notify current customers by email before the change takes effect.