Privacy Policy: MWS QBO MCP

Effective 9/30/2026

What it accesses: With authorization from a company administrator, MWS QBO MCP connects to Middle West Spirits' own QuickBooks Online company through Intuit's OAuth-secured API. It reads accounting data (e.g., transactions, accounts, reports) and, when a user requests it, creates or updates records such as customers, items, invoices, bills, and accounts, and emails invoices to customers.

How it's used: Data is used only for the company's internal bookkeeping, financial reporting, and analysis. Requests are processed through Anthropic's Claude AI service, which receives the data returned for each request a user makes. Conversations are retained by Anthropic under its own privacy policy and the company's account settings.

Sharing: Data is never sold, rented, or shared for marketing. It is shared only with the service providers needed to operate the app (Intuit and Anthropic), and with a customer when a user chooses to email them an invoice.

Storage and security: OAuth tokens are stored only on the user's own computer, in a file protected by their Windows account. They are never sent to or stored on our systems. QuickBooks data is not cached: it is fetched live for each request and kept in memory only while that request is processed. The only QuickBooks data the app keeps is an accountability record of changes: each change made through the app is recorded in an activity log (who made it, when, the company, and the record's type, number, customer/vendor or item name, and amount) kept in Middle West Spirits' internal shared folder, and transactions it creates or edits carry an internal note naming the person. A log of requests is also kept on the user's computer for troubleshooting.

Exports: When a user asks for an export, the app saves a copy of the requested QuickBooks data as a file in a folder the user chooses (by default, a local "MWS QBO Exports" folder). Export files are treated as confidential financial records, are not shared outside Middle West Spirits, and are deleted automatically after 30 days unless the user changes that setting or moves them elsewhere.

Disconnecting: An administrator can revoke access at any time from QuickBooks Online (Settings → Apps) or by contacting us. Revoked tokens stop working immediately and are deleted from the user's computer the next time the app runs.

Contact: brian.miller@middlewestspirits.com