Virani CPA | Bookkeeping, Tax & Fractional CFO

Introduction

Virani CPA ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Information We Collect

We may collect information about you in a variety of ways, including:

Personal Data: Name, email address, phone number, and other contact information you provide when scheduling consultations or contacting us.
Financial Information: Information necessary to provide our accounting, tax, and advisory services.
Usage Data: Information about how you access and use our website, including your IP address, browser type, and pages visited.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Communicate with you about our services
Schedule and manage appointments
Comply with legal and regulatory requirements
Protect our rights and prevent fraud

Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as required by law or to protect our rights. We may share information with trusted service providers who assist us in operating our website and conducting our business.

Third-Party Integrations — QuickBooks Online

Clients may authorize Virani CPA to connect to their QuickBooks Online (QBO) company through Intuit's official OAuth 2.0 flow. Authorization is voluntary and can be revoked at any time. When you connect QBO, the following applies:

Data we access:Profit & Loss and Balance Sheet reports, Cash Flow, aged receivables/payables, the chart of accounts, and individual transactions we flag for categorization review. We use Intuit's accounting scope. We do not access payroll data, customer credit cards, or stored payment methods.
Writes we perform: When you or your CPA approve a category for a previously-uncategorized transaction, we write that category back to your QBO company. We do not delete, void, or modify any other transaction fields without your explicit review and approval.
How we store it: OAuth refresh and access tokens are encrypted at rest using AES-256-GCM with a key held in our production secrets manager. Report data is stored in our managed PostgreSQL database (Supabase) in the United States. Access is restricted to the specific client and their authorized CPA staff via row-level security.
Sub-processors who see QBO-derived data:
- Intuit Inc. — source of the data.
- Supabase, Inc. — database and authentication.
- Vercel, Inc. — application hosting and serverless compute.
- Google LLC (Google Drive) — stores signed close-package PDFs in the client's CPA folder.
- Resend, Inc. — delivers transactional email notifications (e.g. “your monthly close is ready for sign-off”).
Retention: Financial snapshots and close packages are retained for seven (7) years to align with CPA professional record-retention standards. You may request earlier deletion by contacting us; deletion is subject to legal or regulatory hold.
How to disconnect:At any time you can ask your CPA to use the “Disconnect” control in our admin console, which revokes our access tokens. You may additionally revoke access directly in your Intuit account at accounts.intuit.com → Security. Disconnecting stops all further sync; previously-synced snapshots remain in our records per the retention policy above until deletion is requested or retention expires.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information (subject to legal requirements)
Opt out of marketing communications

Cookies

Our website may use cookies and similar tracking technologies to enhance your experience. You can set your browser to refuse cookies, but some features of our website may not function properly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: