Privacy Policy

Effective date: July 21, 2026

This Privacy Policy explains how DSD MGMT, LLC ("we," "us," or "our") collects, uses, stores, shares, and protects information in connection with our internal QuickBooks Online integration (the "Integration"). It applies to this website (https://www.dsdenergy.us/) and to the Integration described below.

1. About the Integration and who this policy is for

The Integration is a private, internal software integration built and operated solely for our own business. It connects to our own QuickBooks Online ("QuickBooks") company files through Intuit's API in order to support our internal accounting and financial operations. The Integration is not a public, multi-tenant product offered, sold, or distributed to outside customers or the general public.

Because the Integration operates only against QuickBooks company files that we own and administer, the individuals whose information may be processed are primarily our own personnel and authorized users, together with the customers, vendors, and other parties that already appear in our QuickBooks accounting records.

2. Information we collect

a. QuickBooks / Intuit company data (accessed via the Intuit API). When the Integration is connected to one of our QuickBooks company files, it accesses accounting and financial data from that company file through Intuit's API. Depending on the operation, this may include:

• Company profile and settings information;
• Chart of accounts and general-ledger data;
• Transactions, journal entries, invoices, bills, payments, and credits;
• Customer records and vendor records (which may include names, business names, contact details, addresses, and related identifiers);
• Reports and other financial and accounting information available through the QuickBooks API.

Intuit is the source of this company data. We access it only from QuickBooks company files that we own and are authorized to administer.

b. Authentication credentials and OAuth tokens. To connect to Intuit's API, the Integration uses the OAuth 2.0 authorization framework. We store and process the OAuth access tokens, refresh tokens, realm (company) identifiers, and related connection metadata that Intuit issues. These tokens allow the Integration to make authorized API calls on our behalf.

c. Personal data of authorized users. We may process limited personal information about the personnel who set up, authorize, or operate the Integration — for example, names and email addresses — for administration, access control, and support purposes.

d. Website information. Our website may collect standard technical information (such as IP address and browser type) through routine web-server logging. See Section 8 (Cookies and analytics).

We do not intentionally collect special categories of sensitive personal data through the Integration, and we do not use the Integration to collect information from the general public.

3. How we use information

We use the information described above only for legitimate internal business purposes, including to:

• Operate the connection between our QuickBooks company files and our internal systems;
• Perform internal financial operations, accounting, bookkeeping, reporting, reconciliation, and analysis;
• Consolidate and review data across our QuickBooks company files;
• Maintain, secure, troubleshoot, and improve the Integration;
• Comply with applicable legal, tax, audit, and recordkeeping obligations.

We do not use QuickBooks company data for advertising, and we do not sell it. We do not use the data to build profiles of, or to market to, third parties.

4. How we share information — and what we do not do

We do not sell your information, and we do not share it for others' independent marketing.

We share information only in the limited circumstances below:

• Hosting and infrastructure sub-processor — Microsoft Azure. We host and process data using Microsoft Azure cloud services, including Azure SQL Database (data storage), Azure Blob Storage (file/object storage), and Azure Key Vault (secure storage of secrets and OAuth tokens). Microsoft acts as our hosting sub-processor and processes the data on our behalf, subject to its own security and privacy commitments.
• Intuit. Intuit is the source of the QuickBooks company data and the provider of the API used by the Integration. Our access to and use of QuickBooks data is subject to Intuit's own terms and privacy practices.
• Professional advisors. We may share information with our accountants, auditors, and legal advisors as reasonably necessary for the internal business purposes described in this policy.
• Legal and compliance. We may disclose information where required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or those of others.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

5. Data storage and security

We take reasonable measures to protect information against unauthorized access, disclosure, alteration, and destruction. Our practices include:

• Encryption in transit. Connections to Intuit's API and to our cloud services use industry-standard encryption (TLS/HTTPS).
• Encryption at rest. Data stored in Microsoft Azure services is encrypted at rest using Azure's platform encryption.
• Secret and token protection. OAuth tokens and other secrets are stored in Azure Key Vault rather than in application source code or general-purpose storage.
• Access controls. Access to the Integration, its data, and its stored credentials is restricted to authorized personnel on a need-to-know basis and is protected by authentication controls.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We describe our practices honestly and do not claim any specific third-party security certification that we have not obtained.

6. Data retention and deletion

We retain QuickBooks company data, connection metadata, and related information only for as long as reasonably necessary for the internal business purposes described in this policy or as required by applicable legal, tax, audit, or recordkeeping obligations. When information is no longer needed for these purposes, we delete it or otherwise render it inaccessible.

Disconnecting the QuickBooks connection. Because the Integration is administered by us, we can disconnect any QuickBooks company file from the Integration and revoke its authorization at any time. Disconnection can be performed from within the QuickBooks / Intuit account settings (by removing the app's authorization) and/or from our side by revoking the stored OAuth tokens. When a connection is disconnected, the Integration can no longer access that company file's data through the API.

Deletion requests. To request deletion of data processed by the Integration, contact us using the information in Section 9. Upon a valid request, and subject to our legal and recordkeeping obligations, we will delete the relevant stored data (including stored OAuth tokens) within a reasonable period.

7. Your rights and choices

Depending on your relationship to us and applicable law, you may have rights to request access to, correction of, or deletion of personal information we hold about you, and to object to or restrict certain processing. To exercise any such right, contact us using the details in Section 9. We will respond consistent with applicable law. We will not discriminate against you for exercising these rights.

8. Cookies and analytics

This website may use a limited number of strictly necessary cookies and standard web-server logs required to operate and secure the site. The Integration itself is an internal, back-end integration and is not a public-facing web application that serves marketing cookies or third-party advertising trackers to the general public. If we adopt analytics or non-essential cookies in the future, we will update this policy and, where required, provide appropriate notice or choices.

9. How to contact us

For privacy questions, requests, or to exercise your rights, contact:

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above and post the updated policy at this URL. Material changes may be communicated through additional notice where appropriate. Your continued use of, or connection to, the Integration after an update takes effect constitutes acceptance of the revised policy.

11. Governing law

This Privacy Policy and any dispute arising out of or relating to it are governed by the laws of the State of Texas, USA, without regard to its conflict-of-laws principles.