What we collect, what we do with it, and how you shut it off. This covers both the threeseeds.io website and the Three Seeds application that connects to QuickBooks Online.
Last updated October 20, 2026
Three Seeds LLC provides bookkeeping, controller, and part-time CFO services to owner-operated businesses. This policy explains how we handle information from our website and from any QuickBooks Online company you connect to our application.
If you submit the contact form, we collect the name, email address, company name, revenue range, and message you enter. Our contact form is processed by Formspree, which delivers the submission to us and stores a copy. We also receive standard web server logs, including IP address, browser type, and pages requested.
If you connect a QuickBooks Online company, we request the accounting scope (com.intuit.quickbooks.accounting) and read only what we need to do your accounting and advisory work:
We do not request the payroll or payments scopes. We never ask for, receive, or store your Intuit username or password. Authorization happens on Intuit's own sign-in screen, and we only receive a token afterward.
We do not sell your information. We do not share it with advertisers. We do not use your QuickBooks data to market to you or to anyone else.
We use third-party providers to host the application, store data, and deliver email. They process your information only to provide those services to us, under contract, and not for their own purposes. Our website contact form is processed by Formspree. We will disclose any provider that has access to QuickBooks data on request.
The connection between Three Seeds and your QuickBooks company is held as an access token and a refresh token. Those tokens are stored server-side in our connection service. They are encrypted at rest, transmitted only over TLS, never written to application logs, and never stored in your browser. Access is limited to Three Seeds personnel who need it to do your work.
You can end our access at any time, two ways, and you do not need to ask us first:
Either route revokes the token immediately, and we delete our copy. Data we already pulled is handled under the retention periods in section 8. If you want that deleted sooner, ask and we will do it, subject to records we are required to retain.
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Reach us through the contact page and we will respond within 30 days. Depending on where you are located, you may have additional rights under state or national privacy law, and we will honor them.
We protect your information with encryption in transit and at rest, access controls, and least-privilege practices. No system is perfectly secure. If a breach affects your data, we will tell you promptly and tell you what we are doing about it.
Our services are for businesses. They are not directed to anyone under 18, and we do not knowingly collect information from children.
If we change this policy, we will update the date at the top of this page. If a change materially affects how we handle your QuickBooks data, we will tell connected clients directly before it takes effect.
Questions about this policy, or about data we hold, go through the contact page. See also our end user license agreement.