Effective 30 September 2026 · updated 30 September 2026
This policy covers KyClick Customer Sync ("the App"), an internal tool operated by CornerStone Protection. It applies to data the App reads from QuickBooks Online.
With an administrator's authorisation, the App reads CornerStone Protection's accounting records from its QuickBooks Online company: customers (name, company, address, phone numbers, email, status), vendors, products and services, invoices, estimates, payments, sales receipts, credit memos, refunds, recurring transactions, bills, bill payments, purchases, purchase orders, deposits, transfers, journal entries, and the related lists (accounts, classes, departments, terms, tax codes, payment methods). It does not read payroll or employee records, and QuickBooks does not give apps access to bank account numbers or payment card data. The App never creates, changes or deletes anything in QuickBooks.
Customer contact details are used to recognise existing customers when they phone us, so calls can be routed and answered correctly. Calls are answered by an AI phone assistant (operated for us by Vapi); when a caller's number matches a customer record, that customer's name and address are made available to the assistant for the duration of the call. The AI assistant does not receive any financial information.
Accounting records are used only for CornerStone Protection's own internal reporting and customer follow-up by its staff and internal tools. They are not shared with third parties.
We do not sell, rent or share the data for marketing, and it is never used to train AI models.
The copy is stored in a database on a dedicated server in the United States. The database is not reachable from the internet; access is limited to authorised staff using SSH keys. All connections to QuickBooks and to the App's web pages use TLS. QuickBooks access tokens are stored encrypted.
The copy is refreshed from QuickBooks regularly, and records removed in QuickBooks are removed from our copy at the next refresh. If the App is disconnected, we delete the stored data within 30 days.
An administrator can revoke access at any time in QuickBooks Online (Settings → Apps). Customers can ask us what data we hold about them, or ask us to correct it, using the contact below.
CornerStone Protection — scstone18@gmail.com