Privacy Policy

Effective date: to be set. Plain-English draft under counsel review; the final binding text will be posted here.

This policy explains how Inventive Group, Inc., a Texas corporation doing business as ProfitFinder ("ProfitFinder," "we," "us"), collects, uses, and shares personal data when you visit our website, talk to us about an engagement, work with us under a retainer, or connect the ProfitFinder app to your accounting system.

The short version: we get access to your financial systems because that is the job. We use what we see to find profit trapped in your business, and for nothing else. We do not sell your data, we do not advertise against it, and we do not train generalized AI models on it.

ProfitFinder is operated by Inventive Group, Inc., d/b/a ProfitFinder, [to be set], Texas, USA. Privacy questions: hello@inventive.io.

We act in two roles, and which one applies decides who you should talk to:

• Controller for data about visitors to this website and the people who contact us about an engagement: your name, work email, company, what you told us, billing details, and website usage analytics. This policy governs that data.
• Processor for your company's business data - the accounting records, job costs, invoices, quotes, payroll categories, operational exports, and connected-system data we access to do the work ("Client Data"). We process Client Data on your instructions under your engagement agreement. If your personal information appears inside a client's records we hold (for example your name on their invoice or timesheet), contact that client first; they control it.

• Contact and engagement information: name, work email, phone, company, role, and whatever you tell us in the first conversation or on a form.
• Billing information: billing contact, retainer history, and payment method details handled by our payment processor. We do not store full card numbers or bank credentials.
• Client Data: the accounting, job-cost, invoicing, expense, and operational data we access during an engagement, described in Section 1.
• Connected-system data: data from systems you choose to connect, including QuickBooks Online (Section 3) and any other tools you authorize, limited to what the connection needs.
• Usage data: pages viewed, features used, log data, IP address, browser and device identifiers.
• Communications: emails, support requests, meeting notes, and recordings you agree to.

If you connect the ProfitFinder app to QuickBooks Online, you authorize us through Intuit's OAuth flow. That connection is yours to grant and yours to revoke.

What we read. Depending on the scopes you approve, we read accounting records from your QuickBooks Online company: chart of accounts, customers and vendors, invoices, bills, payments, estimates, items, classes, projects, journal entries, and reports derived from them. We read your company's business-contact records as they exist in QuickBooks; we do not request or store banking credentials, and we do not use Intuit's payroll detail unless you explicitly ask us to.

What we do with it. We use QuickBooks Online data only to provide the service you asked for: mapping how money moves through your business, instrumenting profit visibility, producing the reporting and analysis you engaged us for, and supporting and securing the app itself.

What we never do with it. We do not sell it. We do not share it with advertisers or data brokers. We do not use it for cross-context behavioral advertising. We do not use it to train generalized AI models, and we do not make it available to any other customer - including in aggregated form, except as statistics that identify no company and no person.

Writing back. Where a feature writes data into QuickBooks Online, it does so only at your direction and only within the scopes you approved.

Disconnecting. You can disconnect ProfitFinder at any time from within the app or from your Intuit account settings. On disconnection we stop accessing your QuickBooks Online data, revoke the stored tokens, and delete the data we retrieved from it within 30 days, except where we are required to keep records by law (Section 10). You can also ask us to delete it sooner by emailing hello@inventive.io.

Security. Connection tokens and retrieved data are encrypted in transit and at rest, and access is limited to the people working your engagement (Section 7).

We use personal data to: deliver the engagement you hired us for; operate, secure, and support our software; process payments; respond to what you send us; understand how the site and product are used so we can improve them; send service notices; send marketing you can opt out of at any time; and meet legal obligations.

Our AI-powered features process the data you give us to produce output inside your engagement - summaries, flags, and analysis. That output is yours. We do not use Client Data or QuickBooks Online data to train generalized AI models, and we do not expose one client's data to another.

We share personal data only with:

• Service providers and sub-processors that help us run ProfitFinder - hosting, email delivery, analytics, AI infrastructure, and our payment processor - each bound by contract to use the data only to serve us (Section 6).
• Systems you connect, as directed by you.
• Your own advisors, when you ask us to share work product with them.
• Legal recipients, when required by law, subpoena, or to protect rights, safety, or the service, with notice to you where lawful.
• A successor entity in a merger, acquisition, or sale of assets, subject to this policy.

We never sell personal data, and we do not share it for cross-context behavioral advertising.

We keep the list of providers who process data on our behalf, the service each performs, and where it operates. Request the current list at hello@inventive.io. If you have a data-processing agreement with us, we notify you of changes as that agreement requires.

We encrypt data in transit and at rest, limit access to the people staffed on your engagement, review access when staffing changes, and keep credentials and connection tokens in managed secret storage. No system is perfectly secure. If a breach affects your data we will notify you as required by law, and we will tell you what we know rather than what sounds best.

We use cookies and similar technologies for sessions, preferences, and analytics. You can control cookies through your browser; blocking essential cookies may break parts of the site or app. We honor opt-out preference signals where the law requires it.

Depending on where you live - including California under the CCPA/CPRA and Texas under the TDPSA - you may have the right to:

• Know or access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your personal data.
• Port your data in a usable format.
• Opt out of targeted advertising, profiling, and sale of personal data. We do none of those.
• Not be discriminated against for exercising these rights.

To exercise a right, email hello@inventive.io. We will confirm the request is genuinely yours and respond within the time the law allows. You may use an authorized agent where permitted, and you may appeal a refusal by replying to our decision. Requests about data inside a client's records should go to that client (Section 1); we assist them as their processor.

We keep personal data only as long as we need it:

• Prospect and contact data: while we are in conversation and for a reasonable period after, then deleted or de-identified.
• Client Data: for the life of the engagement. For 30 days after it ends you may request an export; after that we delete it from production systems and from backups on our backup-rotation schedule.
• QuickBooks Online data: deleted within 30 days of disconnection or of your deletion request (Section 3).
• Billing records: as long as tax and accounting law requires.
• Support and log data: for a limited operational period.

ProfitFinder is operated from the United States, and personal data is processed and stored in the United States. If you use the site or service from outside the US, you understand your data is transferred to and processed in the US.

ProfitFinder is for business use and is not directed to anyone under 18. We do not knowingly collect personal data from children; if we learn we have, we delete it.

When we update this policy we post the new version here and update the effective date. For material changes we notify you by email before they take effect.

Privacy questions or requests: hello@inventive.io, or by mail: Inventive Group, Inc., d/b/a ProfitFinder, [to be set], Texas, USA.

Terms of Service · Start the conversation

This draft is under counsel review and is not yet the final binding text. Questions in the meantime? Email hello@inventive.io or start the conversation.