Privacy Policy

Purpose and current scope

Sunrise Books Review is a private, read-only accounting-review tool operated by Sunrise Psychiatry, PLLC for its authorized internal use. It supports bookkeeping review, reconciliation assistance, explanations, and financial summaries.

The tool is currently in evaluation using an Intuit test company. Access to Sunrise Psychiatry’s real QuickBooks company is disabled. Real-company use requires separate authorization, verification of applicable provider arrangements, and an updated notice if data practices change.

Sunrise Psychiatry operates this tool for its own authorized purposes, not on Intuit’s behalf. The public policy website does not provide access to the tool or to accounting records.

Information processed

The connection handles application credentials, OAuth tokens, a QuickBooks company identifier, and company-name information. It does not ask for your QuickBooks password or bank login credentials.

Permitted reads cover company information, accounts, financial reports, journal entries, and purchases. In an authorized connection, these records can include dates, amounts, transaction descriptions, and information about employees, vendors, customers, and account holders.

This tool is not intended for patient records, clinical information, or other protected health information. Do not submit such information. If it appears in an accounting record, stop that review until an appropriate handling process is established.

Use and service providers

Information is used to authenticate and verify the authorized company, retrieve requested records, and assist with accounting review. The app does not offer tools to create, modify, or delete QuickBooks transactions or initiate payments.

Intuit processes authorization and API requests. When AI analysis is requested through OpenAI’s Codex assistant, relevant prompts and requested accounting results are sent to OpenAI for processing. Local execution does not keep those results exclusively on the Mac. OpenAI’s applicable terms, privacy practices, and account data controls also govern that processing.

We do not sell accounting information or use it for advertising. Provider processing must support the authorized functionality and comply with the applicable agreements and permissions. Publication of this notice does not itself authorize production data sharing.

The main “Improve the model for everyone” account setting was verified off during setup. We require applicable training controls to be reviewed before real-company use. We do not promise zero retention or that disabling training eliminates service-provider processing.

Local storage and security

The current connection stores credentials encrypted on the authorized Mac, outside the cloud-synced project folder, with a separate encryption key and restricted file permissions. These controls do not protect against every risk, including a compromised device or someone with equivalent local access.

The connector is designed to suppress credentials and raw accounting results in diagnostic logs. Assistant conversations, application-managed session records, and user-requested reports may still contain accounting information. Approved reports may be saved in Sunrise’s cloud-synced workspace.

Retention and deletion

• Final bookkeeping reports and decision records: our internal default is seven years after the related tax return is filed, or longer for asset-basis records, unresolved matters, legal holds, or accountant-directed requirements. This is not a universal legal retention period.
• Temporary extracts and working copies: manually remove within 30 days after the review is complete and required supporting records have been preserved. Never delete the sole copy of a required record.
• Conversations and local session records: keep while useful for authorized bookkeeping. There is no fixed 30-day chat-review or deletion requirement. Authorized users may delete them through supported controls after preserving necessary records and conclusions.
• Connection credentials: keep while the connection is needed; manually remove the dedicated local vault and encryption key within seven days after permanent disconnection. Temporary disconnect/reconnect testing is not permanent disconnection.

No automatic deletion system is implemented. These rules do not delete records in QuickBooks. Provider-held records, application-managed copies, cloud recovery copies, and backups are subject to their own retention and supported deletion processes; deleting one copy does not guarantee immediate removal of every copy.

This policy website

These informational pages are hosted using Cloudflare Pages. They contain no app login, accounting database, contact form, advertising scripts, or analytics scripts added by this site. Cloudflare may process network request information, such as IP addresses and request metadata, to deliver and secure the pages under its applicable terms and privacy policy.

If you contact us by email, we use the information you send to respond and address the request. Do not email passwords, access tokens, or patient information.

Disconnecting, requests, and updates

Authorized users may disconnect the app through QuickBooks’ integration-management controls. This stops future authorized access subject to Intuit’s token behavior; it does not automatically erase saved reports, conversations, credentials, or provider-held records.

For access, correction, deletion, or privacy requests, contact dev@sunrisepsychiatryaz.com. Requests are handled subject to applicable law, required record retention, and the supported processes of the relevant provider.

We will update this notice when material practices change and notify authorized users before enabling materially different uses. The version date identifies the published text.