Privacy Policy

Effective 16 August 2026 · Last updated 16 August 2026

This policy explains how Limited Reality LLC (“we”, “us”) handles information in the Limited Reality Holdco Console (the “Service”), including data obtained from QuickBooks Online.

What the Service is

The Service is a private financial administration tool operated by Limited Reality LLC for itself and the entities it owns or manages. It consolidates accounting data across several legal entities so that ownership, intercompany balances and net financial position can be reviewed in one place. It is not offered to the general public, and it does not sell, rent or trade any data.

Information we collect

QuickBooks Online data

When an authorised administrator connects a QuickBooks Online company, we request the accounting scope only (com.intuit.quickbooks.accounting). We do not request payments or payroll scopes. Depending on the company connected, we may read and store:

• Company profile information, including the QuickBooks company (realm) identifier
• Chart of accounts, account classifications and account balances
• Classes and other reporting dimensions
• Trial balance and general ledger figures by period
• Customer and vendor records where required for intercompany matching

This data may include information about third parties, such as the names of customers or vendors recorded in a connected company’s books.

Authentication data

Administrators sign in with a Microsoft work account. We store the email address, display name and Microsoft directory object identifier, together with sign-in timestamps and the roles granted to that account.

Operational records

We keep an audit log of administrative actions — for example connecting a QuickBooks company, granting a role, or posting an adjustment — recording who performed the action and when. Our hosting providers generate standard server logs, including IP addresses.

How we use it

• To consolidate financial position across entities we own or manage
• To reconcile intercompany balances and identify differences between sets of books
• To calculate ownership interests and aggregate net worth
• To authenticate administrators and enforce role-based access
• To maintain security, diagnose faults and keep an audit trail

We do not use QuickBooks data for advertising, and we do not use it to train machine learning models for any purpose beyond operating the Service for our own entities.

How we protect it

• OAuth access and refresh tokens are encrypted with AES-256-GCM before being written to the database, using a key held separately from the stored ciphertext.
• Data is transmitted over TLS and stored in a managed PostgreSQL database.
• Access requires a Microsoft work account that has been explicitly provisioned. Signing in with a valid Microsoft account is not sufficient on its own.
• Permissions are role-based, and administrative actions are logged.

No system is perfectly secure, and we do not claim otherwise. We aim to notify affected parties promptly if we become aware of a breach affecting their data.

Who we share it with

We do not sell personal information, and we do not share QuickBooks data with third parties for their own purposes. We rely on the following service providers, who process data on our behalf:

• Vercel — Application hosting and content delivery
• Neon — Managed PostgreSQL database hosting
• Microsoft Azure (Entra ID) — Administrator authentication
• Intuit — Source of QuickBooks Online accounting data

We may disclose information where required by law, or where necessary to establish or defend legal claims.

Retention and deletion

We keep accounting data for as long as the relevant QuickBooks company remains connected and for so long afterwards as we need it for accounting, tax and audit purposes. Audit log entries are retained for at least seven years, consistent with financial recordkeeping practice.

Disconnecting a company in QuickBooks, or from the Service’s administration screen, revokes our access tokens and stops further data collection. To request deletion of data already stored, contact us at admin@limitedrealityllc.com. We will delete it unless we are required to retain it by law.

Your rights

Depending on where you live, you may have rights to access, correct, delete or port personal information we hold about you, and to object to certain processing. California residents have rights under the California Consumer Privacy Act, including the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined under that Act. To exercise any right, contact us at the address above.

Cookies

The public website uses privacy-preserving analytics that do not use cookies to track individuals across sites. The administration area sets a session cookie that is strictly necessary to keep an administrator signed in.

International users and children

The Service is operated from the United States, and data is stored there. It is intended for business use by authorised administrators, and is not directed to children under 13. We do not knowingly collect information from children.

Changes

We may update this policy. Material changes will be reflected in the “last updated” date above, and where the change is significant we will notify connected administrators directly.

Contact

Limited Reality LLC — admin@limitedrealityllc.com