Privacy Policy
Effective October 30, 2026
This policy describes the current single-business deployment of Bogaso Inventory operated by Bogaso LLC (“Bogaso”). The application supports inventory management and an optional QuickBooks Online product-catalog connection.
Information processed
- Inventory records: product names, descriptions, SKUs, barcodes, categories, prices, costs, stock quantities, batch dates, and movement notes. Avoid entering unnecessary personal information into free-text fields.
- Sign-in information: the application checks the configured store password and stores hashed session tokens with expiration times. The administrator maintains the password in the server configuration.
- QuickBooks information: after authorization, the application processes the company identifier, product-catalog information, product mappings, and access and refresh tokens. The current feature does not fetch customer, employee, or payment-card records.
- Technical information: the server uses the connecting IP address temporarily to limit sign-in attempts and may record operational error information. Hosting and network providers may maintain their own operational logs.
Vendor contacts and reports
Authorized users may store vendor business names, contact names, email addresses, phone numbers, addresses, and notes, and associate vendors with products. Inventory reports and CSV exports use these records and the stock ledger. Only enter vendor contact information you are authorized to use for business purposes, and share exported files only with authorized recipients.
How information is used
Information is used to authenticate access, maintain inventory and movement history, manage vendor relationships, prepare inventory reports, import authorized QuickBooks catalog items, keep the integration working, and troubleshoot operation. The current application contains no advertising trackers or third-party analytics scripts. Bogaso does not sell the application's business records or use them for targeted advertising.
Storage, security, and service providers
Business records, sessions, and encrypted QuickBooks tokens are stored in PostgreSQL. The configured database is hosted on Amazon RDS. QuickBooks tokens are encrypted at rest by the application. Database connections use TLS with certificate verification. Authorized administrators control the application server, credentials, database access, hosting location, and backups. No security measure eliminates all risk.
Information is shared with Intuit as needed to authorize and operate the connection, and processed by hosting and infrastructure providers as needed to run the service. Access may also be provided when required by applicable law. Intuit's processing is described in its Global Privacy Statement.
Cookies
The application uses an essential, HttpOnly session cookie to keep you signed in for up to eight hours. It uses SameSite protections and is marked Secure when the deployment uses HTTPS. Signing out invalidates the current server-side session. No advertising cookies are added by the application.
Retention and deletion
Inventory records and the movement ledger remain in the database until an authorized administrator removes them under the business's record-retention requirements. Expired sessions and OAuth connection states are removed during applicable sign-in or connection operations. Disconnecting QuickBooks revokes the grant and removes the current stored connection tokens; it does not remove imported products or historical product mappings. Copies may remain in backups until those backups are rotated by the operator.
Your choices and requests
You can sign out and, if authorized, disconnect QuickBooks from the integration screen. For access, correction, export, or deletion requests, contact the Bogaso LLC store administrator through your existing business contact channel. The administrator will consider your authorization, applicable legal requirements, and required business records. The current interface exports product snapshots; a complete record export or deletion requires administrator assistance.
Scope and changes
The application is intended for authorized business users, not children. If its features, providers, or data practices change, this policy should be updated before those changes are put into use. The effective date above identifies this version.