Ravdan Connector Privacy Policy

Last Updated: 7 October 2026

This Privacy Policy explains how Ravdan Group ("Ravdan", "we", "us") collects, uses, shares and protects information when you use Ravdan Connector (the "App"). The App connects your QuickBooks Online company to other business software, including Ravdan applications, that you choose to connect.

This policy covers the App only. Our general website is covered by the Ravdan Group Privacy Policy and Cookie Policy.

1. Information We Collect

When you connect QuickBooks

You connect the App by signing in to Intuit and approving access. Intuit then sends us:

Connection details: your QuickBooks company ID (realm ID) and your company name.
Access tokens: OAuth 2.0 access and refresh tokens. These let the App reach your QuickBooks company. We never see or store your Intuit password.

Data the App reads or writes in QuickBooks

Depending on the permissions you approve and the applications you connect, the App may access:

Accounting data, such as company information, customers, vendors, items, invoices, payments, accounts and reports.
Payments data needed to collect payment for an invoice:
- Mobile money (MTN, Airtel, Zamtel): the customer's phone number and mobile network, plus the amount.
- Card payments through QuickBooks Payments (US businesses only): the amount, currency and a card token. Card numbers are turned into tokens by Intuit. The App does not store card numbers or security codes.
Profile information of the person who connected the company, provided by Intuit: name, email address, phone number and address.

Mobile money

If your business uses mobile money, you give us the API token of your own Lenco account. We store it encrypted and use it only to send payment requests to that account.

For each payment request, we keep a record so we can record the payment in QuickBooks exactly once:

the invoice it was for
the amount and currency
the customer's phone number and mobile network
the payment's status and the Lenco and mobile network reference numbers

Information about connected applications

For each application you allow to use the App, we keep its name, which QuickBooks companies it may access, and a one-way hash of its API key. The key itself is not stored.

Technical information

Our servers keep basic operational logs: request times, error codes, and the Intuit transaction ID (intuit_tid) used for troubleshooting with Intuit. We do not log access tokens, passwords or card numbers.

2. How We Use Information

We use this information only to:

Keep your QuickBooks connection working, including refreshing access tokens automatically.
Carry out the requests made by you and the applications you connected.
Show you which companies and applications are connected.
Contact you about your connection, your account, security issues and service changes.
Diagnose errors, prevent misuse and keep the App secure.
Meet legal obligations.

We do not sell your data. We do not use your QuickBooks data for advertising, and we do not share it with data brokers.

3. How We Store Your QuickBooks Data

The App passes QuickBooks data between QuickBooks and the applications you connected. It does not keep its own copy of your accounting records.

What we do store is limited to:

your connection details and encrypted access tokens
your connected-application settings
if you use mobile money, your encrypted Lenco API token and the payment records described in section 1

If a future feature needs to store more, we will say so in the App and update this policy first.

4. How We Share Information

Applications you connect: data is sent only to applications you have authorized, and only for the QuickBooks companies you allowed them to access.
Intuit: to read and write your QuickBooks data and process payments, the App sends requests to Intuit. Intuit's handling of your data is governed by Intuit's own privacy statement.
Lenco and mobile networks: when you use mobile money, the App sends each payment request (amount, phone number and mobile network) to your own Lenco account. Lenco and the customer's mobile network process the payment under their own terms and privacy policies.
Service providers: hosting and infrastructure providers that run the App for us, under confidentiality and security obligations.
Legal requirements: when the law requires it, or to protect the rights, property or safety of Ravdan, our users or others.
Business transfers: if Ravdan is involved in a merger, acquisition or sale of assets, this policy will continue to protect your information.

5. Security

All traffic between you, the App, Intuit and connected applications uses HTTPS (TLS).
QuickBooks access and refresh tokens, and Lenco API tokens, are encrypted at rest with AES-256-GCM.
Application API keys are stored only as one-way hashes, and each key can reach only the companies it was granted.
Access to production systems is limited to authorized Ravdan staff.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.

6. Disconnecting and Deleting Your Data

You can disconnect the App at any time, either from within the App or from the Apps area of your QuickBooks Online company. When you disconnect, we:

Revoke the App's access tokens with Intuit, where we can.
Delete the stored tokens, your company's connection details, your Lenco API token, your mobile money payment records, and every application's access to that company.

To have all information about you or your company deleted, email privacy@ravdan.org. We will complete the request within 30 days, except for information we must keep by law.

7. Data Retention

Connection details, tokens and mobile money payment records are kept only while your company is connected. Operational logs are kept for up to 90 days for security and troubleshooting, then deleted.

8. Your Rights

Under the Zambia Data Protection Act, 2021 and other laws that may apply to you, you may have the right to:

access the personal information we hold about you
correct inaccurate information
delete your information
object to or restrict certain processing
withdraw consent, for example by disconnecting the App
complain to your data protection authority

To use any of these rights, email privacy@ravdan.org.

9. International Transfers

The App's servers, and Intuit's, may be located outside your country. Where information is transferred across borders, we protect it as described in this policy.

10. Children

The App is a business service and is not intended for anyone under 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this policy as the App changes. We will post the new version on this page and update the "Last Updated" date. If a change is significant, we will also notify connected customers by email or in the App.

12. Contact Us

Ravdan Group
Privacy: privacy@ravdan.org
General inquiries: info@ravdan.org
Address: Lusaka, Zambia

QuickBooks and Intuit are trademarks of Intuit Inc. Ravdan Connector is an independent application and is not affiliated with, sponsored by or endorsed by Intuit Inc.

Back to Home