Terms of Service

Effective: April 2026 · Kaizen CFO Services LLC · Miami, FL

1. Service Description

Kaizen API ("Service") is a REST API and MCP (Model Context Protocol) server that provides secure, permissioned access to QuickBooks Online ("QBO") data for use with AI-powered tools including Claude Code, Cursor, and other MCP-compatible clients.

The Service acts as an intermediary between your AI tools and Intuit's QuickBooks Online API, providing authentication, scope-based access control, guardrails, and audit logging.

2. AI and Large Language Model Processing

Important: Your QuickBooks data is transmitted to third-party AI services for processing. Please read this section carefully.

When you use the Service with AI tools (e.g., Claude Code, Cursor), your QuickBooks data — including financial transactions, entity records, and reports — is sent to third-party Large Language Model ("LLM") providers for analysis, categorization, and automation.

What AI does with your data:

Analyzes financial data to answer your questions (e.g., revenue reports, account balances)
Categorizes transactions and suggests journal entries
Generates invoices, payments, bills, and other records based on your instructions
Produces financial analysis and summaries

What AI does NOT do with your data:

Your data is never used to train AI models. It is used for inference (analysis) only.
AI does not make autonomous financial decisions — all write operations require your explicit instruction
Your data is not shared with other users or used to improve AI models

Current AI service providers:

Provider	Service	Data Retention	Training Use
Anthropic	Claude API	7 days (API logs)	Never

We may update this list as we integrate additional AI providers. Changes will be reflected in this document.

3. Intuit Relationship

Kaizen CFO Services LLC does not process User Data on Intuit's behalf. Kaizen and Intuit are independent controllers of personal information, each independently determining the purposes and means of processing.

Your use of QuickBooks Online is governed by Intuit's own terms of service. The Service accesses your QBO data only through Intuit's authorized OAuth 2.0 API with the scope com.intuit.quickbooks.accounting.

4. User Obligations

By using the Service, you agree to:

Use the Service only for legitimate business purposes related to your QuickBooks Online account
Protect your API key and not share it with unauthorized parties
Review AI-generated outputs (invoices, journal entries, etc.) before committing them to your QBO account
Not use the Service to redistribute, resell, or provide bulk access to QBO data
Not attempt to reverse engineer, circumvent security controls, or abuse the Service
Comply with all applicable laws, including data protection and financial regulations

5. Data Retention and Deletion

We retain the following data:

Data Type	Storage Location	Retention
OAuth tokens	Google Secret Manager	Until disconnection
Tenant record (company name, realm ID)	Google Firestore	Until deletion request
API key hash (SHA-256)	Google Firestore	Until revocation/deletion
Audit logs (action, timestamp, IP, duration)	Google Firestore	Until deletion request
QBO financial data	Not stored — passed through to AI tools in real time	N/A

You may request deletion of all your data by disconnecting your account or contacting us at administrator@kaizencfo.com.

6. Disconnection

You may disconnect from the Service at any time. Upon disconnection:

All API keys are immediately revoked
OAuth tokens are deleted from Secret Manager
Your tenant record is marked as disconnected
You may request full data deletion including audit logs

You can also disconnect the Kaizen app from within QuickBooks Online via Settings > Manage apps.

7. Security

We implement the following security measures:

API keys are hashed with SHA-256 before storage — raw keys are never stored
OAuth tokens are stored in Google Secret Manager with AES-256 encryption at rest
All API communication is over HTTPS (TLS 1.2+)
Scope-based access control limits what each API key can do (26 granular scopes across read, write, and analyze)
Guardrails enforce limits on financial operations (e.g., maximum invoice amounts)
Every API call is logged to an audit trail with timestamp, action, IP address, and duration

8. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. KAIZEN CFO SERVICES LLC DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE.

AI-generated outputs may contain errors. You are solely responsible for reviewing and verifying all AI-generated content before taking action on it, including but not limited to journal entries, invoices, and financial analysis.

9. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, KAIZEN CFO SERVICES LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICE. OUR TOTAL LIABILITY SHALL NOT EXCEED $500 USD.

10. Governing Law

This Agreement is governed by the laws of the State of Florida, United States. Any disputes shall be resolved in the courts of Miami-Dade County, Florida.

11. Changes to Terms

We may update these terms from time to time. Material changes will be communicated via the email associated with your account. Continued use of the Service after changes constitutes acceptance.

12. Contact

Kaizen CFO Services LLC
Email: administrator@kaizencfo.com
Miami, FL