Privacy Policy

Who we are

LeStage Corp is a privately held parent company. The LeStage QuickBooks Online Bridge is used only by staff of LeStage Corp and related companies we operate or connect, including EHMR (Ed’s Heavy Mobile Repair), RepairFront, LeStage CVC, EHM Holdings, and other companies in our group.

It is not a public consumer product. It is not a marketplace, a software service we sell to third-party QuickBooks customers, or a public plugin store listing.

LeStage QuickBooks Online Bridge

A private ChatGPT custom GPT lets authorized staff ask operational and accounting questions. ChatGPT calls only our HTTPS bridge. That bridge is a Google Cloud Run service in us-central1. Encrypted Intuit OAuth tokens and the company registry are stored in Cloud SQL Postgres in the same Google Cloud project.

Each QuickBooks company (realm) is connected separately. There is no default company. Reads from QuickBooks are limited to an allowlist: company information, transactions, and reports. Writes, when enabled, follow preview, then human confirmation, then commit. Production writes can be disabled. We do not use Intuit Change Data Capture (CDC). We do not train our own model on QuickBooks data.

Data we process

• QuickBooks Online company profile, transactions, reports, and connection metadata for companies we connect
• OAuth tokens, stored encrypted on our infrastructure
• GPT prompts and responses that may include accounting data the user asked to retrieve
• Technical logs needed to operate and secure the service

Data we do not send to OpenAI

We do not send Intuit Client ID, Client Secret, access tokens, or refresh tokens to OpenAI or ChatGPT. OpenAI never receives those credentials.

Data we send to Intuit

We send standard QuickBooks Online Accounting API calls for connected companies. The bridge authenticates to Intuit with OAuth 2.0.

Data we send to OpenAI / ChatGPT

ChatGPT authenticates to our bridge with an API key. The bridge returns only sanitized application JSON from GPT Actions—not raw tokens or Intuit secrets. That response may include accounting data the user asked to retrieve.

Hosting

The Bridge runs on Google Cloud in us-central1 (Cloud Run and Cloud SQL). This website is hosted separately on Vercel. Server logs may include technical information such as IP address, browser type, and request time as part of ordinary security and reliability operations.

Retention

OAuth tokens and company records are kept while a company remains connected. Disconnecting or re-authenticating a company stops API use for that QuickBooks realm.

Sale of data and advertising

We do not sell personal or company data. We do not use third-party advertising.

This website

This website is an informational corporate site. It does not use advertising trackers or invasive analytics.

If you submit the contact form, we collect the information you provide: name, company, email address, optional phone number, inquiry type, and message. That information is used only to respond to the inquiry and to keep an internal record of correspondence.

Form submissions are validated on the server and are subject to rate limits intended to reduce abuse. Do not include sensitive personal information, account credentials, or confidential deal materials in an unsolicited message.

Contact

Questions about this policy: inquiries@lestagecorp.com, or the contact form. Related terms are at /terms.

Not legal advice

This policy describes internal operational practices. It is not legal advice and does not create rights for the public.