Privacy Policy

Effective date: October 15, 2026

Who we are. VIVA MCP Finances (the "Application") is operated by Viva Insurance Group LLC, 4100 Lafayette Center Drive, Suite 100, Chantilly, VA 20151 ("we"). It is an internal application used by our authorized team members to access the QuickBooks Online accounting data of our affiliated companies.

What we access. With the authorization of a company administrator, the Application reads accounting data from connected QuickBooks Online companies using Intuit's accounting scope only. Today this is basic company information; as features are added, it may include financial reports and accounting records. The Application does not create, change or delete QuickBooks records.

Information about users. To control and record access, we process each user's name, email address and identity from our identity provider, and an audit record of each request: who made it, when, which company, the outcome, and a cryptographic fingerprint of the response. Audit records do not store the financial content of responses.

How we use information. Only to provide authorized users with the information they request, to enforce access permissions, to secure the Application, and to keep an audit trail. We do not sell information, use it for advertising, or share it with third parties except service providers acting on our behalf or where required by law.

AI assistants. When an authorized user accesses the Application through an AI assistant, such as Claude by Anthropic, the information that user requests is sent to that assistant's provider to fulfill the request, under that provider's terms.

Storage and security. The Application runs on servers we control in the United States. Data is encrypted in transit between users, our servers and Intuit. Access is restricted by identity, per-user and per-company permissions, and a dedicated, least-privilege database account for the component that accesses QuickBooks. QuickBooks authorization tokens are stored with restricted file permissions, are never written to logs, and are used only by the component that calls QuickBooks.

Retention. Audit records are kept for seven years. QuickBooks authorization tokens are kept only while a company is connected; when a company is disconnected, our administrators delete its stored tokens.

Disconnecting. A company administrator can disconnect the Application at any time from QuickBooks Online (Apps), or by contacting us. After disconnection we stop accessing that company's data.

Intuit. Intuit Inc. is not responsible for this Application. QuickBooks and Intuit are trademarks of Intuit Inc.

Changes and contact. We may update this policy; the effective date above shows the latest version. Questions: info@vivagroup.ai.