Privacy Policy

1. Who operates this application

Smile More Officer Pull is operated by Smile More Dentistry PC, 140 Oak Tree Road, Tappan, NY 10983, for the practice’s own use. It is a private tool. It is not sold or offered to the public.

2. What this policy covers

This policy describes how we handle QuickBooks Online information that the application reads for our own companies, and what this website itself collects. This website does not ask visitors for a name, email, password, or payment card, and it does not use marketing cookies or advertising.

3. What QuickBooks data we access

The application connects only to QuickBooks Online companies that a practice officer authorizes, currently:

• Smile More Dentistry PC (SMD)
• Washington Dental Associates (WDA)

It requests the QuickBooks accounting (not payments) permission, and it only reads three reports for the prior month, plus a re-read of the last three completed months so late postings are caught:

• Profit and Loss
• Balance Sheet
• Statement of Cash Flows

SMD reports are requested on an accrual basis. WDA reports are requested on a cash basis. The application does not write to QuickBooks: it does not create, change, or delete invoices, payments, customers, vendors, or any other records. It does not use QuickBooks as a source of patient health records, and it is not a medical-records system.

4. Purpose

We use this information only so practice officers can review the practices’ own monthly financial results. We do not use it for marketing, advertising, resale, credit decisioning, or any service provided to other businesses or to the public.

5. Storage and security

The monthly pull runs on an on-premises Ubuntu Linux server in our New Jersey office at 19 Legion Drive, Bergenfield, NJ 07621. OAuth tokens that let the script read QuickBooks are stored only on that server, in local files with restricted permissions (directory mode 0700, token files mode 0600). Client credentials are stored the same way and are loaded into the job at run time; they are not placed in source code, chat, email, or shared drives.

The report results are encrypted at rest and are available only to practice officers. They are not mixed into shared staff dashboards, Slack, email, or ordinary logs. Application logs record status and counts only. They do not record financial figures, tokens, or passwords.

6. Retention

Encrypted monthly files are kept for the practices’ internal financial records for as long as officers need them for review and recordkeeping, and are then deleted or archived under ordinary practice record-retention rules. OAuth access and refresh tokens are kept only while a company remains connected. When a company is disconnected, those tokens are revoked with Intuit and the local token file for that company is removed.

7. Sharing

We do not sell, rent, or share this QuickBooks information with third parties. We do not use it for advertising. Intuit remains the service that holds the original QuickBooks company data, under Intuit’s own terms and privacy policy. This website is hosted on Cloudflare; Cloudflare may process ordinary website request data (such as IP address, date, requested path, and browser type) as described in Cloudflare’s privacy policy, in order to serve these pages. We have not enabled extra application logging or log export on this website.

8. Authorization and revocation

A practice officer signs in to Intuit and approves each company connection. Either the officer or Intuit can remove that connection at any time, including from the QuickBooks Online connected-apps settings. After a disconnect, the application cannot read that company’s reports until an officer authorizes it again. See Disconnect for what happens next and how to reconnect.

9. Visitors to this website

These pages exist so Intuit and practice officers can read our Privacy Policy, terms, and disconnect instructions. We do not run analytics, advertising, or social-media trackers on this site, and we do not set marketing cookies. If you complete a QuickBooks authorization that returns to our /callback page, that page displays a one-time code in your browser so an officer can finish the connection on our server. The page does not send that code onward from your browser.

10. Children

This application is not directed at children and does not knowingly collect information from children.

11. Changes

If we change this policy, we will update this page and the effective date. The current version is always the one published at this URL.

12. Contact

Questions about this policy or about the QuickBooks connection may be sent by mail to: