Privacy Policy
Last updated: October 5, 2026
How we collect, use, share and protect information on our website, in the QBuddy app and at QBuddy Academy.
Who we are and what this covers
This Privacy Policy explains how bright i-deas tech, LLC, a limited liability company with offices at 5550 Glades Rd, Suite 511, Boca Raton, FL 33431 (“bright i-deas”, “we”, “us”), collects, uses, shares and protects information when you visit brighti-deas.com, contact us, use the QBuddy application, take lessons at QBuddy Academy, or otherwise use our services (together, the “Services”).
QBuddy is software for accounting, bookkeeping and tax firms. The Services are offered to businesses, not to consumers. Our Terms and Conditions govern your use of the Services, and this policy is part of them.
Questions about this policy or your information: write to info@brighti-deas.com or call (888) 463-5585.
The short version
- We collect what you give us (for example your name and email when you subscribe or ask for a demo), what our website measures without cookies, and what the QBuddy app needs to do its job for your firm.
- Bank statements and the data read from them belong to your firm and its clients. We process them on your firm’s behalf, to provide the Services.
- We do not sell personal information, and we do not use your clients’ data to market to them.
- Service providers handle information for us: hosting, databases, email delivery, payments, scheduling, telephone and document processing.
- You can unsubscribe from our emails at any time and ask us to access, correct or delete your information.
Information we collect
Information you give us
- Newsletter, free kit and demo requests. Your email address and, when you choose to give them, your name, your firm’s name and your phone number.
- Booking a demo. When you book through the calendar on our site, the details you enter (such as your name, your email and your answers to the booking questions) are collected by our scheduling provider and shared with us.
- Calls and messages. What you tell us when you call, email or write to us. Calls to our phone line may be answered by a virtual phone assistant. Calls, including those our virtual assistant answers, may be recorded and transcribed for quality, for training our staff and to keep a record of your request; when a call is recorded, you are told at the start of the call. A summary of the call and the details you give to book a demo may be kept.
- Becoming a client. Your firm’s name, address, phone number and contact person, the contact’s name and email, the QuickBooks products you use, how many clients you serve, your IT contact, any notes you add, and the plan you choose.
- Payments. The details needed to process a payment (see “Payments” below).
- QBuddy Academy. For each person your firm invites: name, email address, firm, role and language, and then their progress, quiz answers, points, badges, certificates and activity.
Information our website collects by itself
Our website measures how it is used with its own analytics, which set no cookies. When analytics is on, your browser keeps a random visitor identifier and a short session identifier (in the browser’s storage), and for each page sends us: the page address, the domain of the page that sent you, the campaign tags and ad click identifiers in the link you followed, your browser language, time zone and screen width, your local time, and what you do on the page (for example how far you scroll, which buttons you click, and whether you open the booking calendar). Our hosting provider adds an approximate location (country, region and city) worked out from your IP address, and a device type, operating system and browser family worked out from your browser. We do not store your IP address or your browser’s full identification string with this data.
If you send one of our forms, the visitor identifier on that device can be linked to the email address you gave, so we can see which pages of our site you visited.
Analytics does not run if your browser sends a Do Not Track or Global Privacy Control signal. You can also turn it off with the “Opt out” link at the foot of every page, which deletes the visitor identifier.
Information the QBuddy app processes
QBuddy is a Windows application that your firm installs. To do its job it processes:
- Firm and user details. Your firm’s registration details and, for each person who uses QBuddy, their Windows user name, workstation number and computer name, and whether they are an administrator.
- Statements and files. The bank and credit card statements and CSV files your team sends, the client and account they belong to, and the file’s name and location on your computer. Statements are uploaded to our servers, where they are read by automated document processing on our and our service providers’ systems. The statement file is deleted from our servers as soon as its transactions have been extracted; a file that could not be read may be kept for a short time, only to resolve the problem, and is then deleted. The transactions, balances, totals and dates read from each statement are kept with your firm’s account to provide the Services.
- Your clients’ books. The rules your firm creates, and what QBuddy reads from and writes to QuickBooks for each client: the chart of accounts, vendor and customer names, and the transactions it posts.
- Connections. When you connect a client’s QuickBooks Online company, you sign in with Intuit, and the access tokens Intuit issues are kept on our servers with that client so QBuddy can post for you. For QuickBooks Desktop, QBuddy works with the company file open on your computer, and we keep the file’s location. If your firm connects MyOnline.TAX, we keep its access key and exchange the client lists, statements and status information that integration needs.
- Use and technical records. When QBuddy signs in: the time, the app version, the Windows user name, the workstation and the public IP address of your network (found through an IP address lookup service). While QBuddy is open: which screen and which client each workstation is working on, so we can support you. Events such as errors, failed uploads, totals that do not agree with the bank and the choices made about them, with the computer name and Windows user name; the updates installed; and records of requests to our servers, including the IP address. Error reports may reach us by email through an error reporting service.
- Payments in the app. See “Payments”.
Payments
Payments are processed by our payment processors, PayPal and Stripe. When you buy credits in the QBuddy app, the card details you enter (card number, expiration date, security code, cardholder name and billing address) are sent directly to PayPal to process the payment, and we do not store your card number or security code. We keep a record of each payment: the processor’s transaction number, the amount, the payer’s name, the IP address, a description and the credits bought. When you pay through our website, you enter your card on Stripe’s pages, and we receive the customer, subscription and invoice information Stripe sends us, never the full card number.
How we use information
- To provide the Services: read statements, apply your rules, post to QuickBooks, keep your history, and run QBuddy Academy.
- To manage your account, plans, credits and payments, and to prevent fraud and misuse.
- To answer you, schedule and run demos, set up your firm and give support.
- To send the newsletter and what you asked for, and to follow up on a demo request. You can unsubscribe at any time.
- To keep the Services secure and working: find and fix problems, watch performance, and protect our systems, you and others.
- To understand how our website and Services are used and improve them, including by creating aggregated or de-identified information that does not identify you, your clients or any person.
- To comply with the law, enforce our Terms and protect our rights.
Statements and your clients’ information
The statements your firm sends, and the information in them about your clients and about the people and businesses they pay or are paid by, belong to your firm and its clients. We process them on your firm’s behalf and under its instructions, as its service provider, to provide the Services. Your firm decides what to send and is responsible for having the right to share it with us (see our Terms).
We do not sell this information, we do not use it to market to your clients, and we use it only to provide, secure, support and improve the Services for your firm. If a client of your firm asks about their information, please contact your firm; we will help your firm respond.
Cookies and similar technologies
Our own pages set no cookies. They use your browser’s storage for a few things: the analytics identifiers described above, your light or dark theme, your language and your analytics opt out. Features we include from others may set their own cookies: the booking calendar from TidyCal and the payment pages from Stripe. Our pages also load fonts from Google Fonts and a script from the jsDelivr network, which receive your IP address when your browser asks for them.
Emails
If you subscribe, download the free kit (which includes the newsletter) or ask for a demo, we may send you our newsletter and messages about your request. Our emails tell us whether they were opened and which links were clicked. Every marketing email has an unsubscribe link, and you can also write to info@brighti-deas.com. We keep a record of an unsubscribed address so we do not write to it again. While your firm is a client, we still send messages about your account, payments and the Services.
How long we keep information
- Statement files your firm sends: deleted from our servers as soon as their transactions have been extracted (a file that could not be read: kept for a short time to resolve the problem, then deleted). Copies your firm keeps on its own computers are your firm’s.
- Website analytics: deleted after 90 days.
- QBuddy app event records: deleted after 30 days. Records of requests to our servers: only the most recent ones are kept.
- Records of payment processor events: 24 months.
- Newsletter and demo request contacts: until you unsubscribe or ask us to delete them, and then only what we need to respect your choice.
- Your firm’s account, the transactions and totals read from its statements, rules and history: while your firm is a client, and afterwards for as long as needed for the purposes in this policy; then deleted or de-identified.
- Records the law requires us to keep, such as payment and tax records: for as long as the law requires.
You can ask us at any time to delete a statement, a client’s data or your firm’s data. We may keep information when the law requires it, to resolve disputes or to enforce our agreements, and copies in backups are removed as the backups are replaced.
How we protect information
We use administrative, technical and physical safeguards suited to the information we handle, such as limiting access to the people and systems that need it, an access key for each firm, and records of access to our servers. No way of storing or sending information over the internet is completely secure, so we cannot guarantee absolute security. Keep your access key and your computers secure, and tell us right away at info@brighti-deas.com if you believe your account has been misused.
Your choices and rights
- Marketing emails. Unsubscribe with the link in any of them.
- Website analytics. Use the “Opt out” link at the foot of our pages, or turn on Global Privacy Control or Do Not Track in your browser.
- Access, correction and deletion. Ask us for a copy of the personal information we hold about you, or to correct or delete it.
Depending on where you live, including California and other US states with privacy laws, you may have the right to know what personal information we collect, use and disclose; to access, correct and delete it; and to opt out of its sale or of its sharing for targeted advertising (we do neither). We will not treat you differently for using these rights. To use them, write to info@brighti-deas.com. We may need to verify your identity, and we will answer within the time the law requires. An authorized agent may make a request for you with proof of the authorization. If your request is about information we process for a firm, we will pass it to that firm and help it respond.
Children
The Services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, write to us and we will delete it.
Where information is processed
We are based in the United States, the Services are meant for firms in the United States, and our servers are in the United States. Some of our service providers may process information in other countries, with appropriate safeguards; their data protection laws may differ from those where you live. By using the Services you understand that your information is processed in the United States.
Changes to this policy
We may update this policy. We will change the date at the top and, if a change is material, tell clients by email or in the QBuddy app before it takes effect. Using the Services after an update means you accept the updated policy.
Contact us
bright i-deas tech, LLC
5550 Glades Rd, Suite 511, Boca Raton, FL 33431
Email: info@brighti-deas.com
Phone: (888) 463-5585
Website: brighti-deas.com