PPPC Books
Effective 19 August 2026 · Last updated 19 August 2026
What this notice covers. This notice describes PPPC Books, a private bookkeeping and tax-preparation application that we operate for our own accounting records. It is an internal tool. It is not offered to the public, not sold or licensed to anyone, and not listed on any app store.
What it does not cover. This notice does not describe our retail business or our online shop, and it does not describe how we handle information about our customers. Those are covered separately by the privacy policy published on our shop website.
PPPC Books is operated by a small business in New York State for its own bookkeeping. For anything in this notice, contact us at privacy@pppcompany.com.
PPPC Books is used only by named members of our own staff. There is no sign-up, no account creation and no public entrance of any kind. Every page requires sign-in, and sign-in is only possible from email addresses we have listed in advance.
With our authorization, PPPC Books connects to our own QuickBooks Online company and reads:
It writes back one thing, and only when a person has approved it individually: a corrected expense category on an expense we have reviewed. Nothing is ever sent to QuickBooks automatically.
The application requests a single permission scope covering accounting data. It does not request access to payments, and it does not request your Intuit profile — so it never receives an Intuit account holder's name or email address.
Staff photograph or upload receipts, invoices and similar business documents. We keep the file and what was read from it.
Every action recorded in the books is stamped with the email address of the staff member who took it, so that the records show who did what.
PPPC Books holds no customer information of any kind. It contains no payment card numbers, no bank account numbers, no Social Security or taxpayer identification numbers, no postal addresses, no phone numbers and no payroll data. It sets no advertising cookies, runs no analytics, and sends nothing to any tracking or measurement service.
Our accounting data is read from, and written to, our own QuickBooks Online company. Intuit's handling of that data is governed by Intuit's own terms and privacy policy.
When a member of staff asks the application to read an uploaded receipt, the file itself is sent to Anthropic's API to be read. This applies to receipt and invoice images and PDFs that we upload. Anything printed on that document is therefore sent — which for a normal retail receipt means the merchant, the date, the items and the amounts.
Alongside the file we send a fixed instruction and our own list of accounting categories. We do not send our stored transaction records, our vendor records, our ledger, or anything retrieved from QuickBooks.
This happens only when a person asks for it. Nothing is sent automatically, on a schedule, or in the background.
The application runs on infrastructure operated by third-party providers, and our records and uploaded files are stored there. Those providers also supply the sign-in service that controls who may reach the application. They process this information on our instructions in order to provide those services, and not for their own purposes. We will identify them on request.
We do not sell, rent or share this information with anyone else. There are no advertising partners, no data brokers, no analytics providers and no marketing tools connected to this application. Aside from the services described above, the application makes no outbound connections at all.
We keep our accounting records and the receipts behind them indefinitely, and this is deliberate rather than an oversight. A receipt supports a tax deduction, and the period during which tax authorities may examine that deduction can begin years after the receipt was filed — for example when an asset is eventually sold or written off. A fixed deletion schedule would destroy evidence we are still required to be able to produce. We therefore do not set an automatic expiry on business records.
No system is perfectly secure, and we do not claim otherwise.
We can disconnect the QuickBooks connection at any time from within the application. Doing so revokes the credential with Intuit and then deletes our stored copy of it. Accounting records already imported are retained, because they are part of our books.
The people whose personal information appears in this application are our own staff. If you are one of them, you may ask what is held about you and ask us to correct it. Some of it — the record of who approved which entry — is an accounting record we are obliged to keep, and we may not be able to erase it while that obligation lasts.
If your name appears in our records because you sold something to us, write to us at the address below and we will tell you what we hold.
If the application changes in a way that affects what is described here, we will update this notice and change the date at the top. Material changes — in particular any change to the services described above — will be reflected here before they take effect.