Effective July 14, 2026

Privacy Policy

This policy describes how the Rare Book Sleuth CRM handles information obtained through its QuickBooks Online and eBay connections.

Who operates this service

The Rare Book Sleuth operates the Rare Book Sleuth CRM as a private internal business tool. Questions may be sent to books@rarebooksleuth.com.

Information the CRM accesses

When authorized, the CRM may read QuickBooks Online invoices, sales receipts, payments, deposits, customer details, addresses, transaction dates, line-item descriptions, amounts, and record identifiers. It may also read completed eBay orders, buyer and shipping details, item descriptions, amounts, and eBay order identifiers.

How information is used

The information is used only to reconcile book sales, associate sales with customer and inventory records, identify paid invoices, and retain supporting evidence for internal review. The CRM does not create, modify, or delete QuickBooks or eBay transactions.

Where information is stored

Connector tokens and imported records are stored in the local CRM database on the business owner's Mac. The hosted authorization relay does not persist authorization codes, tokens, customer records, or accounting data. It immediately forwards authorization responses to the local CRM. The hosted service temporarily queues eBay account-deletion notices until the local CRM processes them.

Sharing and service providers

Information is not sold or used for advertising. Intuit processes QuickBooks authorization and API requests under its own privacy terms. The hosting provider serves these policy pages and the authorization relay, but the relay is designed not to retain QuickBooks data.

Security

The public handoff uses HTTPS. The local CRM verifies the OAuth state value before exchanging an authorization code, keeps client credentials and tokens out of the hosted relay, and limits QuickBooks API activity to read operations.

Retention and deletion

Locally imported transaction history is retained for business, accounting, and legal recordkeeping. When eBay reports an account-deletion request, the CRM removes matching buyer contact and identity fields while retaining non-personal sale facts such as item, date, channel, and amount. QuickBooks and eBay access can be revoked from their respective account settings.

Changes

This policy may be updated when the CRM's data practices change. The effective date above will be revised when a material update is published.