EXIZIP

Privacy Policy

Last updated: October 7, 2026

This Privacy Policy describes how Stanrell LLC ("Stanrell", "we", "us") handles information in connection with EXIZIP, a Chrome Extension that allows authorized QuickBooks Online users to export invoice PDFs and to export invoice, customer and product/service records as CSV or Excel files.

1. What EXIZIP does

EXIZIP connects to your QuickBooks Online company using Intuit's OAuth 2.0 authorization. At your request, EXIZIP reads the records needed to create files that are downloaded to your computer.

  • Invoice PDF export — selected invoice PDFs are retrieved from QuickBooks and can be downloaded individually or combined into ZIP archives in your browser.
  • Spreadsheet export — invoice, customer and product/service records can be exported as CSV or Excel (.xlsx) files in your browser.

EXIZIP's export functionality is read-only. EXIZIP does not create, modify or delete QuickBooks accounting records.

2. QuickBooks data used for exports

EXIZIP retrieves invoice data and invoice PDFs directly from QuickBooks into the extension. PDF, ZIP, CSV, and Excel exports are generated in your browser and downloaded to your computer. Invoice data and export files do not pass through and are not stored on Stanrell's servers.

Depending on the export you request, EXIZIP may read the following records from your connected QuickBooks Online company:

  • Invoices — fields such as invoice number, customer, invoice date, due date, total, balance, currency and memo, plus the invoice PDF generated by QuickBooks when you request PDF export.
  • Customers — fields that may include names, email addresses, telephone numbers, postal addresses, company names, balances and related information when you request a customer spreadsheet export.
  • Products / Services (QuickBooks Item records) — fields such as name, type, description, price, account reference, taxable status and active status.

Stanrell does not maintain a permanent copy of your QuickBooks accounting data or your export files.

3. Technical connection data handled by Stanrell

EXIZIP uses api.stanrell.com for OAuth/token lifecycle and the technical functions required to maintain your authorized QuickBooks connection. This technical data is separate from the accounting records described above.

Stanrell may maintain:

  • OAuth authorization code — used once to complete the Intuit token exchange and then discarded.
  • QuickBooks Realm ID — the company identifier required to associate your authorized QuickBooks connection.
  • Encrypted refresh token — stored in encrypted form on Stanrell's backend so EXIZIP can maintain the connection you authorized.
  • Backend session and connection metadata — opaque session identifiers, connection identifiers and timestamps used to authenticate extension requests and operate your connection.

QuickBooks access tokens are short-lived and are delivered to the extension for the authorized QuickBooks request. They are not stored as a permanent copy of your accounting data.

4. Data stored locally by the Chrome Extension

EXIZIP uses Chrome extension storage for limited operational state, such as your connection identifier, QuickBooks company identifier, backend session token and export recovery/progress state. This local state supports your connection and allows interrupted exports to resume.

5. Intuit / QuickBooks

EXIZIP communicates with Intuit to authorize your QuickBooks connection and to retrieve the records you request. Intuit's own terms and privacy policy govern Intuit's handling of information on its services.

6. Beta and prospect information

During the EXIZIP beta, Stanrell may keep limited prospect or beta-participant information that you provide directly to us, such as your name, business contact details, trial/beta participation status and related support or follow-up messages. This information is used to administer the beta, provide support and communicate about EXIZIP.

Beta/prospect records are deleted no later than 90 calendar days after the most recent of: the end of your EXIZIP trial, the end of your beta participation, or your last meaningful interaction with Stanrell. A direct deletion request is handled without waiting for that period to expire. A request not to receive further follow-up stops outreach immediately, but does not by itself require immediate deletion of records that must still be retained for the limited beta/support purpose described here.

7. Hosting access logs and application logs

Stanrell's hosting provider automatically creates technical access logs that may include your IP address, request path, browser/device information, country, timestamps, and response information. These access-log records are available to Stanrell in the hosting dashboard for up to 7 days and are used for security, reliability, abuse prevention, and troubleshooting. EXIZIP application logs are designed not to contain invoice or accounting content.

8. Retention, disconnect and deletion

Technical QuickBooks connection data is retained while needed to operate the connection you authorized. When you disconnect through EXIZIP, Stanrell deletes the EXIZIP connection record, requests revocation of the associated Intuit refresh token, and the extension clears its local connection state.

If you revoke EXIZIP directly from your Intuit/QuickBooks account settings, you can contact hello@stanrell.com to request deletion of any remaining Stanrell connection information.

You may also contact us at any time to request deletion of information that Stanrell maintains about your EXIZIP beta participation or connection, subject to any retention required by law.

9. Sharing and sale of data

Stanrell does not sell EXIZIP user data. Information is shared only as needed to provide EXIZIP or comply with law, including with Intuit for QuickBooks authorization/API access and with Stanrell's hosting provider for the technical hosting of Stanrell services.

10. Security

Stanrell uses technical and organizational safeguards appropriate to the information EXIZIP handles. Refresh tokens stored by Stanrell are encrypted, backend sessions use opaque identifiers, and EXIZIP is designed so accounting records and generated export files remain in the extension/browser rather than being stored on Stanrell's servers.

11. Children's privacy

EXIZIP is a business productivity tool and is not directed at children under 13. Stanrell does not knowingly collect information from children through EXIZIP.

12. Changes to this policy

Stanrell may update this Privacy Policy as EXIZIP changes. The "Last updated" date at the top of this page identifies the current version. Material changes will be reflected in the published policy before or when the related behavior becomes active.

13. Contact

Questions about this Privacy Policy or requests concerning your data: hello@stanrell.com