Intuit QuickBooks for Business

"We share personal information with our service providers or agents who provide services on our behalf for the purposes described in this Privacy Statement. Service providers or agents also include AI providers, including generative AI providers. We may also share your personal information with other companies, lawyers, credit bureaus, agents, government agencies, and card associations in connection with issues related to fraud, credit, defaults, or debt collection."

Intuit shares personal data with a very broad range of third parties including generative AI providers, credit bureaus, collection agencies, advertising networks, and research partners. The scope of sharing is extensive.

"When you choose to share data with us, or bring over information from third parties (like a bank or loan provider), Intuit uses that data together to power experiences across the Intuit Platform and products, not just within the individual offering(s) you're using. This means that, for example, we may use your bookkeeping details from QuickBooks, contact and purchase history details from Mailchimp, certain information from TurboTax, and/or recommendations from Credit Karma."

Intuit combines user data across all its products—TurboTax, QuickBooks, Mailchimp, Credit Karma—to build unified profiles. This means sensitive tax and financial data can be linked with marketing and credit data across services.

"Certain features in the Intuit Platform may collect your precise location information, device motion information, or both, if you or your organization grant(s) us permission to do so through your device settings (for example, if you use QuickBooks' time-tracking service, participate in Karma Drive, or use CK Money to locate nearby ATMs)."

Intuit collects precise location and device motion data for multiple features. While device permission is required, the employer/organization can also grant permission on the user's behalf, potentially without individual consent.

"Device and contact data. If you grant permission in your device settings, certain features may have access to your device and contacts. We may collect information about your device(s) such as IP addresses, log information, error messages, device type, and unique device identifiers. Some of our web-enabled desktop services and offerings synchronize with the information on your computer."

Intuit accesses device contacts and synchronizes data from the user's computer. Combined with session-replay technologies that record clicks, mouse movements, scrolls, and keystrokes, this represents extensive device-level data collection.

"From time to time we may change or update our Privacy Statement. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by posting a notice in the Intuit Platform or on a community post; by sending you a notification; or by other means consistent with applicable law."

Intuit reserves the right to change its privacy practices at any time. Notification may be as minimal as a community post, and continued use of the platform constitutes acceptance of the new terms.

"Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform and successfully run our business. Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information for as long as necessary to: comply with our legal or regulatory compliance needs; to exercise, establish or defend legal claims; and/or to protect against fraudulent or abusive activity on our service."

Intuit retains data indefinitely by default and can continue keeping data even after a deletion request or account closure under broad justifications like 'running our business' and fraud protection, with no specific timelines given.

"There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it."

Even after a deletion request, Intuit may be 'unable' to fully delete data due to vague 'technical' or 'operational' reasons, with no timeline for when actual deletion will occur. Data may simply be 'isolated' indefinitely rather than deleted.