BuyDBestApp Privacy Policy
Effective October 25, 2026.
Operator and purpose
BuyDBestApp (also called BuyDBest Reconciliation Desk) is operated by BuyDBest for its internal accounting. It is available only to authorized BuyDBest personnel with verified buydbest.com Google Workspace identities. It is not offered to other businesses or the public.
Information processed
The app processes Google sign-in identifiers, verified email address and Workspace domain; connected QuickBooks company identifiers, chart of accounts and ledger transactions; and selected Plaid account identifiers, account names, masked account numbers and transaction information. Transaction information may include dates, descriptions, merchant names, amounts and transaction identifiers. Accounting records may contain information about customers, suppliers or other people appearing in those records.
The app also stores account mappings, schedules, approved classification rules, review decisions, run results and posting history. OAuth tokens and application credentials are held server-side in encrypted cloud secret storage. Google passwords and bank login passwords are not collected by this app. Its current bank scope is Business Checking ending 4402; relevant credit card accounts are configured separately.
Uses
Information is used to authenticate personnel, retrieve authorized financial records, compare transactions with the QuickBooks ledger, identify potential duplicates and exceptions, prepare statement worksheets, and maintain processing history. In approved posting mode, authorized rules or explicit approvals can create QuickBooks journal entries. Review-only mode does not write accounting entries. The app does not initiate payments or move money.
Service providers and disclosures
The app uses a cloud infrastructure provider for hosting, identity, secrets, database storage, scheduling and operational logging; Google for sign-in; Plaid for authorized financial account data; and Intuit for QuickBooks connectivity. Data is transmitted to these providers as needed for these functions. Authorized BuyDBest administrators can access records and configuration for operation and support. BuyDBest does not use app data for advertising, sell it, or make it available as a public dataset. Disclosures may also occur when legally required or necessary to investigate misuse or security incidents.
Storage and safeguards
The primary deployment is in Ohio, United States. Authentication requires a verified BuyDBest Google Workspace identity, and private API requests are authorized server-side. User workspaces are isolated by identity. Connections use HTTPS and credentials remain in encrypted secret storage. The application is designed to omit transaction payloads and tokens from operational logs. These measures reduce risk but do not guarantee that every incident can be prevented. Google, Plaid and Intuit process information under their own terms and policies; no promise is made that all of their processing occurs in Ohio.
Retention and deletion
Financial run history and posting markers currently have no automatic deletion schedule. They are retained to support accounting review, duplicate prevention and auditability until an administrator applies an approved retention or deletion decision. Lambda operational log groups are configured for 30-day retention; other infrastructure logs and retained resources may have different retention. Disconnecting or revoking provider access does not automatically delete previously stored app records or entries already posted in QuickBooks.
Authorized personnel may request access, correction, removal of app access, revocation of connections, or deletion through the BuyDBest administrator identified below. Requests are subject to company recordkeeping requirements, applicable obligations and technical dependencies. Removing posting markers without a controlled plan can affect duplicate prevention. Deletion in this app does not delete independent provider records.
Browser storage
The app uses browser session storage for the access token and temporary OAuth verification values. Sign-out clears this app's session storage. Authentication providers may use their own cookies. The app contains no advertising trackers or marketing analytics integrations.
Changes and contact
BuyDBest will make the current policy available to authorized users and communicate material changes through its internal channels.
Contact: giladbl@buydbest.com.
Operator legal name: BuyDBest.
Effective date: October 25, 2026.