MI Technologies, Inc.

Privacy Policy — ccanalysis

Effective 22 August 2026 · Last updated 22 August 2026

1. Who we are

ccanalysis is a private, internal financial-analysis application operated by MI Technologies, Inc. and used solely by its owner to analyse company credit-card spending and rewards across MI Technologies, Inc. and its affiliated entities.

ccanalysis is not a public or commercial product. It is not offered to, marketed to, or made available to any third party. There is exactly one authorised user.

2. Scope of this policy

This policy describes how ccanalysis handles data obtained through the Intuit QuickBooks Online API and related financial sources. It covers only the ccanalysis application.

3. What data we access

When you connect a QuickBooks Online company to ccanalysis, the application may read:

Data	Why it is accessed
Company information (name, ID, country, currency)	To identify which set of books a transaction belongs to.
Chart of accounts	To reconcile credit-card and bank accounts recorded in the books against accounts registered in the application.
Expense and purchase transactions (date, amount, vendor, category, account)	To categorise spending and calculate which card would earn the most rewards value for each category.
Vendor names	To recognise recurring expenses that could be re-routed to a higher-earning card.

Access is read-only

ccanalysis requests read scopes only. The application contains no capability to create, modify, or delete anything in QuickBooks Online, and no capability to move money, pay a balance, transfer rewards points, or make any booking or purchase. This is enforced structurally in the application's code, not merely by configuration.

What we never collect

• Full credit- or debit-card numbers, CVV/CVC codes, or PINs. The database has no field capable of storing them; card accounts are identified only by issuer, nickname, and the last four digits.
• Social Security Numbers or other government identification numbers.
• Online banking usernames or passwords.
• Payroll records or employee personal data.
• Customer or contact lists.

4. How we use the data

Data is used exclusively to generate internal analysis for the single authorised user:

• Recommending which card to use for a given expense category.
• Identifying recurring expenses that could earn more on a different card.
• Tracking rewards balances, annual fees, and minimum-spend deadlines.
• Monitoring balances, APRs, and due dates to flag avoidable interest.

All output is advisory. The application presents figures and recommendations; every decision and every action is taken by the user outside the application.

5. Automated decision-making and AI

ccanalysis performs deterministic arithmetic (earn rates, point valuations, interest costs) to rank options. It does not make binding decisions and takes no action on the user's behalf. Where a large-language model is used to answer ad-hoc questions, it operates over data already stored in the application. Transaction-level QuickBooks data is not used to train any model.

6. Sharing and disclosure

We do not sell, rent, trade, or share your data. QuickBooks data obtained through the Intuit API is never disclosed to advertisers, data brokers, analytics providers, or any other third party. There is no third-party sharing of any kind, for any purpose, other than where strictly required by law.

7. Storage and security

• Data is stored in a private PostgreSQL database on infrastructure controlled by MI Technologies, Inc. The database is not exposed to the public internet.
• Access requires authentication through the company's single-sign-on identity provider. Access is restricted to one allow-listed account; there is no public sign-up, no guest access, and no debug or bypass path.
• OAuth tokens issued by Intuit are held in an encrypted operating-system keyring, not in the application database and not in source control.
• All access to the application is logged with timestamp and account, providing an audit trail.
• Traffic is encrypted in transit using TLS.

8. Retention and deletion

Financial data is retained only while it remains useful for year-over-year spending analysis, and in any case no longer than seven years, consistent with ordinary business record-keeping.

The authorised user may delete any connected company's data at any time. On disconnection (see below), the associated OAuth tokens are destroyed immediately and the imported accounting data for that company is deleted within 30 days.

9. Disconnecting QuickBooks

You may revoke ccanalysis's access to a QuickBooks company at any time by either:

• using the Disconnect control inside ccanalysis, at /settings/integrations; or
• removing the app from within QuickBooks Online, under Settings → Apps → Manage → Disconnect.

Either action immediately revokes the OAuth grant and stops all further data access.

10. Your rights

The sole user of this application is its owner, who has direct and complete access to all stored data and may export or erase it at will. Should any other individual ever believe their personal data has been processed by this application, they may contact us using the details below and we will respond within 30 days.

11. Children

ccanalysis is a business accounting tool. It is not directed at, and is not used by, anyone under the age of 18.

12. Changes to this policy

If this policy changes materially, the effective date above will be updated. Because the application has a single user, changes are communicated directly rather than by notice.

13. Contact

Questions about this policy or about data handling in ccanalysis:

MI Technologies, Inc.
Email: privacy@mitechnologiesinc.com