Privacy Policy

KWF Bookkeeper — an internal tool of the Kevin Winter Foundation Inc.

Effective October 12, 2026.

This Privacy Policy describes how the Kevin Winter Foundation Inc. ("the Foundation", "we", "us") handles information through KWF Bookkeeper (the "Connector"), a private read-only connector to the Foundation's own QuickBooks® Online company. The Connector has no public users: the only data it touches is the Foundation's own financial data.

1. Information the Connector accesses

Through Intuit's QuickBooks Online Accounting API, the Connector reads the Foundation's accounting records: financial reports (profit and loss, balance sheet, trial balance, transaction detail), accounts, customers, vendors, employees, bills, purchases, invoices, payments, and journal entries. Some of these records contain names and contact details of the Foundation's donors, vendors, contractors, and staff as entered in QuickBooks Online.

2. How the information is used

Solely for the Foundation's own bookkeeping, reconciliation, budgeting, board reporting, grant reporting, and tax and regulatory compliance. The Foundation does not sell, rent, or share this information with third parties for their own purposes, and does not use it for advertising.

3. Processing by service providers

The Connector runs on a computer controlled by the Foundation. In the course of the Foundation's bookkeeping, data read through the Connector — which may include the names and contact details of donors, vendors, contractors, and staff — is reviewed by the Foundation's staff and is transmitted to and processed by Anthropic, PBC as a service provider, through the Anthropic Claude services the Foundation uses to operate its AI bookkeeping assistants. Anthropic processes this data on the Foundation's behalf under its applicable terms and privacy policy for the Foundation's account. The Foundation also uses Intuit's services under Intuit's terms. No other service providers receive data from the Connector.

4. Credentials and security

OAuth access and refresh tokens issued by Intuit are stored only on the Foundation's computer, in a file readable solely by the Foundation's administrator account, and are transmitted only to Intuit over encrypted connections (HTTPS). The Connector is configured so that it cannot create, modify, or delete QuickBooks data. Access to the computer that runs the Connector is limited to the Foundation's administrator.

5. Retention

Intuit tokens are retained until the Connector is disconnected, then deleted. Reports and summaries produced for the Foundation's records are retained as part of the Foundation's financial records for the periods required by law and the Foundation's record-retention practice.

6. Disconnecting

The Foundation's administrator may revoke the Connector's access at any time from QuickBooks Online (Apps → connected apps) or from the Intuit Developer portal. Revocation immediately invalidates the stored tokens.

7. Security incidents

If the Foundation becomes aware of unauthorized access to Intuit data through the Connector, it will revoke the Connector's access, notify Intuit within the time required by the Intuit Developer Terms, and notify affected individuals and any regulators or state authorities where and as required by applicable data-breach-notification law.

8. Individuals' rights

Donors, vendors, contractors, and staff whose details appear in the Foundation's books may contact the Foundation to ask what information is held about them and to request corrections.

9. Changes and contact

We will post any changes to this policy on this page. Questions: Kevin Winter Foundation Inc. · info@kevinwinter.org