Privacy Policy

**Last updated: 27 August 2026**

INFINITUM-UK Limited (company number 12963002), trading as Infinitum Consulting ("Infinitum", "we", "us" or "our"), is the controller of personal data described in this policy.

Our registered office is 4th Floor, 100 Fenchurch Street, London, United Kingdom, EC3M 5JD. You can contact us at Info@Infinitum.Ltd.

This policy applies to www.infinitum.ltd and to the private QuickBooks Assistant operated by Infinitum (the "Assistant").

## 1. Information we process

Depending on how you use our website or the Assistant, we may process:

- contact and correspondence information, including your name, email address, telephone number and the content of enquiries;
- technical and usage information, including IP address, device and browser information, pages visited, timestamps, security events and cookie identifiers;
- QuickBooks connection information, including the QuickBooks company identifier and OAuth access and refresh tokens;
- QuickBooks business data retrieved in response to an authorised question, which may include company information, financial reports, customers, suppliers, invoices, bills and purchases;
- questions submitted to the Assistant and the answers it produces; and
- records needed to administer services, meet legal obligations and protect our systems.

Please do not submit special-category personal data or information unrelated to the business purpose of the Assistant.

## 2. How we use information and our lawful bases

We process information to:

- operate, secure and improve our website and services;
- connect the Assistant to an authorised QuickBooks company and answer read-only questions;
- respond to enquiries and provide support;
- manage contracts, billing and business records;
- prevent misuse, investigate faults and maintain security; and
- comply with legal, regulatory and accounting obligations.

Our lawful bases are performance of a contract or steps requested before entering a contract, our legitimate interests in operating and securing our business and services, compliance with legal obligations, and consent where required for non-essential cookies or marketing. You may withdraw consent at any time without affecting processing already carried out.

## 3. QuickBooks Assistant and automated processing

The Assistant sends an authorised question and relevant QuickBooks data to OpenAI's API so that a response can be generated. It uses a constrained read-only operation selected from an allowlist. The Assistant does not provide tax, legal, audit or financial advice, and its output should be checked against QuickBooks source records before it is relied upon.

The Assistant does not intentionally store a conversation history or a permanent copy of the QuickBooks data returned for a question. It stores OAuth tokens for as long as the QuickBooks connection remains active so that authorised access can continue. Service providers may retain limited request or security logs under their own terms and policies.

The Assistant is not used to make decisions that produce legal or similarly significant effects about individuals.

## 4. Who receives information

We disclose information only where necessary to operate the website and Assistant, including to:

- Wix, which hosts and supports our public website;
- Intuit, which provides QuickBooks Online and its authorisation and accounting APIs;
- OpenAI, whose API processes Assistant questions and relevant QuickBooks data to generate answers;
- the infrastructure provider used to host the private Assistant;
- professional advisers and IT or security suppliers where required; and
- public authorities or other parties where disclosure is required by law or needed to establish, exercise or defend legal rights.

We do not sell personal data.

## 5. International transfers

Some service providers may process information outside the United Kingdom. Where UK data-protection law requires it, we use or rely on an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard. Further information about the safeguards relevant to a particular transfer is available on request.

## 6. Retention

We keep information only for as long as reasonably necessary for the purpose for which it was collected:

- QuickBooks OAuth tokens: until the connection is disconnected, revoked or expires;
- QuickBooks data retrieved for an answer: processed transiently and not intentionally retained as an Assistant conversation history;
- website enquiries: normally up to 24 months after the last substantive contact, unless a continuing relationship or legal requirement applies;
- operational and security logs: normally up to 90 days, unless required for an investigation; and
- contractual, tax and accounting records: for the applicable statutory period, normally up to six years after the relevant financial period or relationship ends.

We may retain information longer where required by law, litigation, regulatory action or a documented security need.

## 7. Cookies

Our website uses essential cookies and may use analytics or other non-essential cookies. Where required, non-essential cookies are used only after consent. You can change your choices through the site's cookie controls or your browser settings. Disabling some cookies may affect website functionality.

## 8. Security

We use proportionate technical and organisational measures designed to protect information, including access controls, HTTPS, restricted credentials, secret storage, token protection and read-only application controls. No internet service is completely secure, and users must also protect their accounts, devices and credentials.

## 9. Your rights

Under UK data-protection law, you may have rights to:

- access your personal data;
- correct inaccurate or incomplete data;
- request erasure;
- restrict or object to processing;
- receive certain data in a portable format; and
- withdraw consent where processing relies on consent.

These rights are subject to legal conditions and exemptions. To exercise a right, email Info@Infinitum.Ltd. We may need to verify your identity.

You may complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or by telephone on 0303 123 1113. We would appreciate the opportunity to address your concern first.

## 10. Third-party services and links

Our website and Assistant rely on third-party services and may link to third-party websites. Their own privacy notices apply to processing they carry out as independent controllers. In particular, users should review the privacy information provided by Wix, Intuit and OpenAI.

## 11. Changes to this policy

We may update this policy to reflect service, legal or operational changes. The latest version will be published on this page with a revised date. We will provide additional notice where a change materially affects how personal data is used.

## 12. Contact

**INFINITUM-UK Limited, trading as Infinitum Consulting**
Company number: 12963002
4th Floor, 100 Fenchurch Street
London EC3M 5JD
United Kingdom
Email: Info@Infinitum.Ltd