Privacy Policy
Last updated: July 7, 2026
This Privacy Policy explains how Xpanse (“Xpanse,” “we,” “us”) collects, uses, and protects information when you use our Business Health Assessment (the “Service”) — the tool that connects to your accounting software to generate a scored assessment of your books. By connecting your accounting software, you agree to this Policy.
Information we collect
- Accounting data (read-only). With your authorization, we access data from your QuickBooks Online or Xero account through their official APIs — for example your balance sheet, profit & loss, chart of accounts, aging reports, and transaction and vendor details. We use this only to produce your assessment. We never create, edit, delete, or move anything in your books, and we never move money.
- Contact information. If you book a review, we receive the name and email you provide through our scheduling provider so we can prepare for and hold the meeting.
- Technical information. Basic information needed to operate the Service, such as session cookies and standard server logs.
How we access your accounting data
We connect using OAuth 2.0 with read-only access. You grant access on QuickBooks’ or Xero’s own consent screen, and you can revoke it at any time from within your QuickBooks or Xero account settings. Revoking access immediately stops any further access by us.
How we use your information
- To generate, display, and (if you request it) discuss your Business Health Assessment.
- To contact you about your assessment and the review you booked.
- To operate, secure, and improve the Service.
- To comply with legal obligations.
We do not sell your information or your accounting data.
How we share information
We share information only as needed to run the Service:
- Accounting platforms — Intuit (QuickBooks Online) and Xero, to authenticate and retrieve your data at your direction.
- Scheduling provider — our calendar/booking provider, when you schedule a review.
- Service providers — vendors who host and operate the Service on our behalf, under confidentiality obligations.
- Legal — where required by law, or to protect our rights, users, or the public.
Data retention and security
We keep your information only as long as needed to provide the Service and for legitimate business or legal purposes, then delete or de-identify it. Access tokens are held securely and are revoked and purged after your assessment unless you become a client. We use administrative, technical, and organizational safeguards designed to protect your information; no method of transmission or storage is 100% secure.
Your choices and rights
- Revoke access to your accounting data at any time from your QuickBooks or Xero settings.
- Request access, correction, or deletion of information we hold about you.
- Opt out of non-essential communications.
Depending on where you live, you may have additional rights under applicable privacy laws. To exercise any of these, contact us using the details below.
Cookies
We use essential cookies to maintain your session and operate the Service (for example, to keep you connected while your assessment is generated). These are required for the Service to function.
Children
The Service is intended for businesses and is not directed to children under 16.
Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.
Contact us
Questions about this Policy or your data? Contact us at info@xpanse.finance.