Last updated: May 25, 2026
This Privacy Policy describes how Shoal Harbor Management LLC ("Shoal Harbor Capital," "we," "us," or "our") handles information in connection with shc-jac (the "Application"), a private, internal-use software tool we use to manage our own accounting records.
The Application is operated solely by and for Shoal Harbor Management LLC and its authorized personnel. It is not offered to the public, and we do not onboard third-party customers or end users. The Application connects only to QuickBooks Online company files that we own or are authorized to administer.
Through Intuit's QuickBooks Online API, and only after an authorized administrator grants access, the Application may read and write our own accounting data — for example: company information, chart of accounts, transactions, journal entries, customers, vendors, and financial reports.
To maintain the connection, the Application stores OAuth 2.0 credentials (a refresh token and short-lived access tokens) and the QuickBooks company identifier (realm ID).
We do not collect personal information from website visitors, and the Application has no public-facing user accounts.
Accessed data is used exclusively for our internal financial operations — generating reports, recording and reviewing transactions and journal entries, and related bookkeeping and controllership tasks. We do not use the data for advertising, profiling, or any purpose unrelated to managing our own books.
OAuth credentials are stored locally on the authorized administrator's device, restricted to that user, and excluded from version control. We retain data only as long as needed for the purposes above and to meet our legal and recordkeeping obligations. Revoking the Application's access in QuickBooks Online invalidates the stored tokens.
We do not sell, rent, or share accounting data accessed through the Application with third parties. The only third party involved is Intuit Inc., which provides the QuickBooks Online platform and API the Application connects to; our use of QuickBooks data is governed by Intuit's applicable terms. We may disclose information if required by law.
We use reasonable administrative and technical safeguards appropriate to a single-operator internal tool, including encrypted transport (HTTPS/TLS) for all API communication, restricted local storage of credentials, and the principle of least privilege. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Because the Application connects only to our own QuickBooks company, access is controlled by our administrators and can be revoked at any time from within QuickBooks Online (Apps → Connected apps).
The Application is a business tool not directed to children and does not knowingly collect information from anyone under 18.
We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this Policy may be directed to jc@shoalharbor.com.