Privacy policy
Who operates this service
Hillen Consulting operates Square Connector for its own internal accounting workflows. Contact support@hillen-online.net for privacy questions, access or correction requests, or complaints.
Current service and information handled
This service provides public information and support links plus a restricted operator dashboard. It does not offer public registration, accept payments, or contain advertising or analytics trackers. The production dashboard supports read-only QuickBooks access after the operator supplies approved production credentials and authorises the connection. The restricted operator dashboard uses a secure, HTTP-only session cookie to authenticate its operator. Informational pages do not use advertising or analytics cookies. Our hosting infrastructure processes connection information, including IP addresses and request metadata, to deliver and protect the website. Support email contains information you choose to send.
The separate, restricted development connector currently uses an Australian QuickBooks sandbox with synthetic transactions. It stores the authorised company identifier, OAuth credentials and tokens, account and tax mappings, transaction results, and operational error metadata. It also reads authorised live Square payment, invoice, order, refund, payout, customer and catalogue information to prepare import reviews and customer/product matching suggestions. Customer names and email addresses may be included for matching; payment card metadata is excluded from stored payment records. Credentials, tokens, snapshots and saved matches are encrypted in its local database. This information is not published on this website.
Purpose and future production use
The connector is intended to reconcile Hillen Consulting’s Square sales, invoices, customer and item details, refunds, fees, GST and payouts with QuickBooks Online. Read-only Square ingestion is enabled in the restricted development connector. Production QuickBooks writes and automated record creation are disabled. Read-only production company and catalogue access is available after approval and connection; transaction reconciliation and posting workflows remain under development. Before enabling them, we will review the actual data flows and update this notice where necessary. Information is used for the authorised business’s accounting, operation of the service, troubleshooting and security, not for advertising or sale to data brokers.
Providers and locations
This website is hosted with Hetzner in Falkenstein, Germany. Authorised QuickBooks operations are processed by Intuit. Authorised Square reads are processed by Square. These providers operate under their own privacy terms and may process information in countries outside Australia. The sandbox connector runs separately on the operator’s development computer. The production dashboard is hosted on the same German server as this website, with separate credentials, encrypted storage and encryption key. Sandbox credentials and snapshots are not copied into production. Production passwords are stored as salted scrypt hashes; credentials and accounting data are excluded from application logs.
Access and security
Connector access is restricted to the authorised operator. Hillen Consulting handles security internally. The website uses HTTPS, and the restricted connector avoids placing tokens in application logs. Security measures reduce risk but do not provide an absolute guarantee. Do not email passwords, API secrets, full card details or unnecessary customer information.
Retention, disconnecting and deletion
Support correspondence and operational records are retained while needed to resolve requests, maintain security, reconcile transactions or meet applicable recordkeeping duties. The development connector retains its transaction-reference ledger to prevent duplicate posting. Disconnecting QuickBooks revokes the connection and removes its tokens, cached catalogue and sandbox posting mappings. App development credentials, saved customer/product matches, read-only Square snapshots, the transaction ledger, logs, backups and records already created in QuickBooks are not automatically deleted. Square access is separate from the QuickBooks connection.
To request access, correction or deletion, email support. We may verify your authority and assess whether records must be retained before acting. Revoking access in QuickBooks stops future API access but does not remove existing accounting records. No automatic deletion period is currently implemented in the prototype.
Questions, complaints and changes
Contact us first with a description of your concern and a safe way to respond. If an applicable privacy law provides further complaint or review rights, those rights remain available. We will publish material changes to this notice here with an updated date.