Effective Date: April 9, 2026 · Last updated: July 2026
AZ Finance ("AZ Finance," "we," "us," or "our"), operated by AZ78 Capital, LLC, provides fractional CFO, accounting, and bookkeeping services. This Privacy Policy explains how we collect, use, disclose, and safeguard information across all of our digital properties, together the "Services," which include:
- Our public marketing websites at azfinance.ai and armanzand.com (the "Website"); and
- Our client financial dashboard at finance.armanzand.com (the "Dashboard"), which integrates with Intuit QuickBooks Online and other third-party services to provide financial reporting and analytics.
By using the Services, you agree to the collection and use of information in accordance with this Policy. Please also review our Terms & Conditions.
1. Information We Collect
a. Information you provide through the Website
When you submit our contact or "Book a Consult" form, we collect the information you choose to provide, such as your name, work email, company name, industry, the service you're interested in, and your message. Form submissions are processed by our third-party form provider and delivered to us by email.
b. Information collected automatically on the Website
Like most websites, we may automatically collect limited technical information such as your IP address, browser type, device information, referring pages, and pages viewed, through cookies and similar technologies (see Section 6). We use an anti-spam service (hCaptcha) on our forms, which may process limited technical data to distinguish humans from automated bots.
c. Information collected through the Dashboard
Account Information: When your Dashboard account is created by AZ Finance, we store your company name and a securely hashed version of your login password. Depending on your setup, we may also store an account email address used for invitations and authentication.
QuickBooks Online Data: With your authorization, we access financial data from your QuickBooks Online account through Intuit's official OAuth 2.0 API. This includes:
- Profit and Loss reports
- Balance Sheet reports
- Statement of Cash Flows
- Accounts Receivable and Accounts Payable aging reports
- Company information (such as company name)
Usage Data: We may collect basic usage information such as login times and pages viewed within the Dashboard for the purpose of operating and improving the Service.
2. How We Use Your Information
We use the information we collect to:
- Respond to inquiries submitted through the Website and communicate with you about our services;
- Provide, operate, and maintain the financial Dashboard and display your reports and analytics in real time;
- Authenticate your identity and manage your session;
- Protect the Services against fraud, spam, and abuse;
- Improve and enhance the Website and Dashboard; and
- Comply with legal obligations.
We do not sell your personal information, and we do not use your financial data for advertising.
3. How We Access QuickBooks Data
We access your QuickBooks Online data exclusively through Intuit's official OAuth 2.0 API. This means:
- We never see, collect, or store your Intuit/QuickBooks username or password;
- You grant access through Intuit's secure authorization process;
- We only request the minimum permissions necessary (read-only access to accounting data);
- You can revoke our access at any time through your Intuit account at accounts.intuit.com; and
- Access tokens are stored securely (encrypted at rest) and refreshed automatically.
4. Data Storage and Security
We take the security of your data seriously and apply protections appropriate to each part of the Services:
- Encryption in transit: All data transmitted between your browser, our servers, and QuickBooks is encrypted using HTTPS/TLS;
- Encryption at rest: QuickBooks OAuth tokens are encrypted using AES-256-GCM;
- Password security: Dashboard passwords are hashed using bcrypt and are never stored in plain text;
- Session security: Dashboard sessions use secure, HTTP-only cookies and expire after a period of inactivity;
- Minimal storage: Financial data is retrieved from QuickBooks in real time and only cached temporarily to improve performance;
- Access controls: Each client can access only their own financial data — there is no cross-client access;
- Additional safeguards: Two-factor authentication (mandatory for admin access), Content Security Policy headers, API rate limiting, and audit logging.
For a fuller description of Dashboard security, see our Security Center. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your information. We share information only with service providers who help us operate the Services, and only as necessary:
- Hosting: Our Website and Dashboard are hosted on Railway;
- Contact-form processing: Website form submissions are handled by our third-party form provider and delivered to us by email (Google Workspace);
- Bot/spam protection: hCaptcha helps protect our forms from automated abuse.
These providers are bound by their own privacy policies and do not have access to your QuickBooks data. We may also disclose information (a) with your consent, or (b) when required by law, subpoena, court order, or governmental regulation.
6. Cookies and Tracking
The Website may use cookies and similar technologies for essential functionality, security (including bot detection), and to understand how the Website is used. The Dashboard uses cookies that are strictly necessary to keep you signed in and secure your session. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Services from working.
7. Data Retention
We retain contact-form inquiries only as long as needed to respond to and follow up on your request. We retain Dashboard account information for as long as your account is active. QuickBooks financial data is retrieved in real time and is not permanently stored. If your account is terminated:
- Your Dashboard login will be deactivated;
- Any cached financial data will be deleted within 30 days; and
- QuickBooks API access tokens will be revoked.
8. Your Rights
Subject to applicable law, you have the right to:
- Request information about what data we hold or access about you;
- Revoke our access to your QuickBooks data at any time;
- Request correction or deletion of your account and associated data; and
- Contact us with any privacy-related questions or concerns.
9. Third-Party Links
The Website may contain links to third-party sites (for example, LinkedIn). We are not responsible for the privacy practices of those sites, and we encourage you to review their policies.
10. Children's Privacy
The Services are intended for businesses and individuals aged 18 and over. We do not knowingly collect information from children under 18.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised effective date and, for material changes affecting Dashboard clients, may notify you by email or through the Dashboard. Your continued use of the Services after changes are posted constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact:
AZ Finance (AZ78 Capital, LLC)
Email: hello@armanzand.com