Privacy policy

Tapp Business Lab connector · last updated 15 October 2026

This page explains, in plain terms, what the Tapp Business Lab connector (“the connector”) does with information from QuickBooks Online and Square. The connector is operated by Mike Tapp, doing business as Tapp Business Lab, in British Columbia, Canada (“we”). It is used only by us, and only for clients who have engaged us for bookkeeping or advisory work.

What the connector reads

QuickBooks Online: the company's settings (name, address, fiscal year, closing date, sales tax setup), its chart of accounts, its transactions (such as purchases, bills, invoices, deposits and journal entries, with their amounts, dates, accounts, tax codes, memos, and the names of customers and suppliers on them), and its reports.

Square (only for clients who use Square and approve the connection): the business profile and locations, sales and orders, payments and refunds, deposits (payouts) and their fees, sales tax, tips, gift card activity, cash drawer records, timecards and team member names, and the item catalogue.

It reads only the accounts a client has connected. It does not read bank logins, card numbers or passwords.

What we do with it

We use the information only to do the work the client engaged us for: month-end reports, reviews of the books, sales-tax and deposit reconciliations, and similar bookkeeping tasks. Today the connector only reads. If we add the ability to make entries in QuickBooks or edit Square items, we will update this page first, and we will do it only for clients who have agreed to that work.

To analyse the information we use Claude, an artificial-intelligence service provided by Anthropic. We have switched off Anthropic's use of our conversations to train its models. We review the results and remain responsible for the work.

Where it is processed and kept

The connector runs on Cloudflare's network, and Anthropic processes information in the United States. Information may therefore be processed and stored outside Canada, including in the United States, where it may be accessible to courts, law enforcement and national-security authorities there.

The connector keeps only what it needs to work: the encrypted connection to each client's QuickBooks and Square, the client's settings, and a log of what it has done. It does not keep a copy of the books or of Square sales. The reports and working papers we prepare for a client are kept as part of our records for that client, as the client's engagement letter allows.

What we never do

We do not sell this information or share it with advertisers or data brokers. We do not use it for advertising, for building profiles, or for anything other than our work for that client. We do not use it to train artificial-intelligence models, and we do not let anyone else use it for their own purposes.

How it is protected

Connection tokens are encrypted. Only Mike Tapp can sign in to the connector, through Cloudflare Access with a one-time code. Each request names the client it is for, and the connector checks it, so one client's information is never mixed with another's.

Disconnecting

A client can disconnect at any time, and the connector stops reading that account immediately:

Or email us and we will disconnect it. When an account is disconnected we delete its connection token. On request we also delete the client's settings and log, except where we must keep records to meet professional or tax-record requirements.

Your rights and contact

You can ask what information we hold about you, ask us to correct it, or ask a question about this policy by emailing mike@tappbusinesslab.ca. If this policy changes, the date at the top changes with it.