Kasora Privacy Policy
Effective date:
Kasora is a private application. Its owner (the “operator”) runs it for the operator’s own businesses. It is not offered to the public and is not sold. This policy explains what data Kasora accesses, how it is used and protected, and how access ends.
What Kasora does
Kasora stores the operator’s financial documents and records and produces reports for the operator’s accountant. It connects to QuickBooks Online (from Intuit) and to Zoho Books using OAuth 2.0, and only for companies the operator chooses to connect. It connects to Google, also using OAuth 2.0, only for the Google accounts the operator chooses to connect.
What data Kasora accesses
For each connected company, Kasora requests accounting access, which can read and write that company’s books. Kasora does not delete records in the books. It reads the company’s accounting records:
- company information;
- lists, such as accounts, customers, vendors, employees and items;
- transactions, such as invoices, bills, payments, expenses and journal entries;
- reports, such as profit and loss and balance sheet.
Kasora also holds the documents the operator uploads to it, such as statements and tax forms.
Google user data
Kasora connects only to the operator’s own Google accounts, each one only after the operator signs in to it and approves the access on Google’s consent page. Depending on what the operator approves, Kasora may:
- read, search, label, draft and send the operator’s email in Gmail;
- read, create and change events in the operator’s Google Calendar;
- read, create and edit files in the operator’s Google Drive and Google Docs;
- read the operator’s Google contacts;
- learn which account was connected, from its email address.
This data is used only to act on the operator’s own instructions: to keep the operator’s records, appointments and correspondence in order. It is not used for advertising, is not sold, and is not used to develop, improve or train generalized artificial intelligence or machine learning models. The operator’s assistant, which runs on Anthropic’s Claude, reads it when the operator asks it to act, and Anthropic processes it only to provide that service.
Kasora’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Access to a Google account ends when the operator disconnects it in Kasora’s settings or removes Kasora at myaccount.google.com/permissions.
How the data is used
Only to keep the operator’s records and to produce reports the operator gives to the operator’s accountant. Write access is used only for entries the operator chooses to record.
How the data is stored and protected
- Kasora runs on a private server in the United States, hosted by Linode (Akamai), behind Cloudflare.
- Only the operator can reach it, through Cloudflare Access and then a passkey.
- The connection tokens issued by QuickBooks Online, Zoho Books and Google are held by separate system users on the server and are never shown on any page.
- Identifiers such as tax numbers are encrypted at rest.
- Data travels over encrypted connections (TLS).
Sharing
The data is not sold, rented or shared with anyone, and is not used for advertising. Kasora uses no third-party analytics or tracking. The only people who receive the data are the operator and, when the operator chooses, the operator’s accountant. Linode, which hosts the server, and Cloudflare, which carries its traffic, handle the data only to provide those services.
Retention and deletion
Data is kept while the operator uses Kasora. Disconnecting a company in Kasora’s settings, or revoking Kasora’s access in QuickBooks Online, Zoho Books or a Google account, stops all further access to that company or account. Data is deleted when the operator asks for it to be.
These pages
This page and the End-User License Agreement set no cookies, run no scripts and collect nothing. Cloudflare, which delivers this site, processes the technical details every web request carries, such as an IP address, to deliver and protect it.
Changes
This policy may be updated. The effective date at the top of this page shows when it last changed.
Contact
Questions about this policy can be directed to the operator through the contact details on file for the Kasora application with Intuit, Zoho or Google.