Privacy Policy
Last updated: October 13, 2026
Crestmoor Bookkeeping Ltd. ("Crestmoor", "we", "us") is an online bookkeeping service operating in Canada. This policy explains what personal and business information we collect, why, how we protect it, and your choices. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), which applies to private-sector businesses in Saskatchewan.
1. Who this covers
Visitors to crestmoorbookkeeping.ca, people who contact us, and our clients who use the Crestmoor client app at app.crestmoorbookkeeping.ca (the "App").
2. What we collect
From you directly: your name, business name, email, phone number, messages you send us, receipt photos you text or upload, and your answers to our questions.
From your connected QuickBooks Online account (only after you connect it through Intuit's sign-in): your company name and ID; your chart of accounts; transactions such as deposits, purchases, bills, invoices, payments and journal entries; customer and vendor names and contact details as they appear in your books; and reports such as profit and loss, balance sheet and sales tax amounts. We also receive access tokens from Intuit that let the App reach your account. We never see or store your Intuit password.
From your connected Jobber or Housecall Pro account (only after you connect it): jobs, invoices, payments and payouts, and the customer names and job details attached to them. We only ask for read access.
For your App sign-in: your username, a sign-in code setup (two-step verification), and basic security logs such as sign-in times and IP address.
From the Get started questions (app.crestmoorbookkeeping.ca/start): your business name and what it does, your name, email and optional phone, and rough details about your books (transaction volume, number of accounts, GST/PST, payroll, how up to date you are). We use these only to set up your service and contact you about it. If you don't become a client, we delete them within 12 months.
On the public website: standard web server logs (IP address, browser type, pages viewed, time). We don't use advertising trackers.
3. How we use it
- To do your bookkeeping and keep your QuickBooks books up to date and correct.
- To prepare and file your GST and PST returns when you ask us to.
- To show you your monthly summary and reports in the App.
- To contact you about your books, questions and missing receipts.
- To bill you for our service.
- To keep the App secure and fix problems.
We do not sell your information. We do not use your data for advertising. We do not use data from your QuickBooks, Jobber or Housecall Pro accounts for any purpose other than providing our service to you.
4. Consent
You give consent when you sign up and when you connect each account. You can withdraw consent at any time by disconnecting (section 8) or emailing us. If you withdraw, we may not be able to keep doing your books.
5. How we store and protect it
- Data is stored on servers in Canada. (Toronto)
- Connection tokens and client data are encrypted at rest, and each client's data is kept separate.
- All connections use HTTPS encryption.
- The App requires two-step verification to sign in. Only invited users can access it.
- Only people who work on your books can see your data.
Some of our service providers (section 6) may process data outside Canada, including in the United States. When that happens, your information is subject to the laws of that country, and may be accessed by its courts or authorities. We use contracts with these providers to protect your information.
6. Service providers
We share information only with the service providers we need to run our service, and only what they need:
| Service provider | Purpose |
|---|---|
| DigitalOcean | Runs our website and the App, and stores App data |
| Intuit Inc. (QuickBooks Online) | Your accounting software, which you connect to the App |
| Housecall Pro | Your job and invoicing software, if you connect it |
| Jobber | Your job and invoicing software, if you connect it |
| Porkbun and Google (email) | Sending and receiving email |
| Stripe (payments) | Billing and payment processing. We never see your full card number. |
| Data processing provider | Processing your bookkeeping data to prepare your books and reports |
We may also disclose information if the law requires it.
7. How long we keep it
- While you're a client, we keep your data so we can do your books.
- After you leave or disconnect, we delete the data we copied from your QuickBooks, Jobber or Housecall Pro accounts and your connection tokens within 30 days, unless you ask us to delete it sooner.
- We keep our own business records about you (invoices, contracts, emails, and copies of GST/PST filings we made for you) for 6 years, because Canadian tax law requires it. Then we delete them.
- Your books themselves stay in your own QuickBooks account. Deleting our copy does not touch them.
TODO(Mac): confirm the 30-day and 6-year periods.
8. How to disconnect
- QuickBooks Online: in the App, choose Disconnect QuickBooks. Or in QuickBooks Online, go to Settings → Apps (My apps), find Crestmoor, and disconnect. Either way, our access stops right away.
- Jobber or Housecall Pro: in the App, choose Disconnect. Or remove the Crestmoor app or API key in your Jobber or Housecall Pro settings.
- Or just email us at hello@crestmoorbookkeeping.ca and we'll do it for you.
9. Your rights
You can ask to see the personal information we hold about you, to correct it, or to delete it. Email us and we'll respond within 30 days. If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
10. Breaches
If a breach of your information creates a real risk of significant harm, we will tell you and report it to the Privacy Commissioner of Canada as PIPEDA requires.
11. Changes
If we change this policy, we'll update the date above. For big changes, we'll email clients first.
12. Contact
Privacy questions: Mac Barlas, Privacy Officer, Crestmoor Bookkeeping Ltd. Email hello@crestmoorbookkeeping.ca. We reply within one business day.