How circl collects, uses, and protects your business data.
Account email, name and hashed password; organization and team details; optional QuickBooks Online accounting data and encrypted OAuth tokens; POS sales and hardware metadata; optional Plaid bank transaction history; payroll and workforce records where enabled; communication and usage data.
We use information to provide accounting, POS, AI, notifications and optional integrations. We do not sell personal information. Feature data is shared with enabled processors such as Intuit, OpenAI, Stripe or Hyperswitch, Plaid, ADP, SendGrid and Twilio as described in the full policy.
Data travels over HTTPS/TLS; passwords are hashed with bcrypt and OAuth tokens are encrypted at rest. Customer data is logically separated on shared infrastructure through application-enforced tenant scoping, roles and audit logging, not physically isolated databases.
We retain your account data for the duration of your subscription. Transaction data synced from QBO is stored as long as your company is connected. When you disconnect a company, the associated tokens are revoked with Intuit and synced data is deleted. Audit logs are retained for 7 years per GAAP requirements. You can request complete account deletion by contacting us.
You may access, correct or delete your personal information; disconnect QuickBooks Online; request a data export or account deletion; and opt out of non-essential communications. See the full policy for how to contact us.
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.