Privacy Policy
Last updated August 21, 2026
AdvisoryMemo turns a bookkeeping client's monthly financial figures into a written advisory memo. Doing that means handling financial information belonging to your clients, so this policy describes exactly what we access, what we do with it, and who else touches it.
This policy covers advisorymemo.com and the AdvisoryMemo application. AdvisoryMemo is operated from California, United States.
What we collect
Account information
When you create an account, we store your name, email address, firm name, and a hashed password. We never store your password in a readable form.
QuickBooks data
If you connect a client's QuickBooks Online company, we read the following through Intuit's API, only for the reporting periods you request:
- Company name and QuickBooks company ID
- Profit and Loss figures: revenue, cost of goods sold, gross profit, operating expenses, and net income
- Individual account lines from that report, including account names as they appear in the chart of accounts
- Bank account names and current balances
We only read. AdvisoryMemo never creates, edits, or deletes anything in your QuickBooks. We do not access invoices, customers, vendors, payroll, or transaction-level detail.
Generated memos
We store the memos you generate along with the figures they were based on, so you can retrieve them later.
What we do not collect
No tracking pixels, no advertising identifiers, no third-party analytics or behavioral tracking.
How we use it
Financial data is used for one purpose: producing the memo you asked for. Account information is used to sign you in, send account email, and bill you.
We do not sell your data. We do not sell your clients' data. We do not use your financial data to build products for anyone else.
AI processing
Memo text is generated using Anthropic's Claude API. The figures for the memo being generated are sent to Anthropic for that request.
Under Anthropic's commercial API terms, data submitted through the API is not used to train their models. We do not grant any permission for your data to be used for model training.
Every figure in a memo is calculated by AdvisoryMemo from your QuickBooks data before generation, and checked against those calculations afterward. The language model writes prose; it does not compute the numbers.
Who else processes your data
We use these providers to operate the service. Each receives only what its function requires.
| Provider | Purpose | What it receives |
|---|---|---|
| Intuit | QuickBooks connection | Authorization requests for companies you connect |
| Anthropic | Memo generation | The figures for the memo being generated |
| Neon | Database | Account records, encrypted tokens, encrypted memos |
| Vercel | Hosting | Application traffic |
| Resend | Account email | Your email address |
| Stripe | Billing | Your billing details, which Stripe holds directly |
We never receive or store your full payment card number; Stripe handles that directly.
How it is protected
- QuickBooks access tokens are encrypted with AES-256-GCM before being stored, under a key held separately from the database.
- Memo content and the figures behind it are encrypted the same way, under a different key, so one key's exposure does not reveal both.
- All traffic runs over HTTPS.
- Access is scoped per account. Requests are checked against the signed-in account, so one firm cannot read another firm's clients or memos.
Being straightforward about the limits: client names, industries, and reporting periods are stored unencrypted so the service can list and sort your memo history. The financial content itself is encrypted. And because the encryption keys are held in the same environment as the application, this protects against database-level exposure rather than against a compromise of the application itself.
No service can promise perfect security, and this one does not. What it can promise is that the protections described here are actually the ones in place.
Disconnecting and deletion
Disconnecting a client in AdvisoryMemo revokes our access token with Intuit immediately. We stop being able to read that company's data at that moment.
You can also revoke access from inside QuickBooks, under the Apps section of the company file.
To delete your account and everything in it, email hello@advisorymemo.com. We will delete your account, connections, and stored memos within 30 days and confirm when it is done. You may also request a copy of your data.
Retention
Memos and account records are kept while your account is open, because the point of the history is being able to look back. Disconnected connection records are retained so past memos remain attributable to the right client, with their access tokens revoked and no longer usable.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to certain processing. California residents have these rights under the CCPA. Email us and we will honor them; we do not charge for this and will not treat you differently for asking.
We do not sell or share personal information as those terms are defined under the CCPA.
Children
AdvisoryMemo is a business tool and is not directed to anyone under 18.
Changes
If this policy changes in a way that materially affects how your data is handled, we will email account holders before it takes effect. The date at the top always reflects the current version.
Contact
AdvisoryMemo — California, United States
hello@advisorymemo.com