Privacy Policy

Effective October 8, 2026 · Last updated October 8, 2026 · End-User License Agreement

This Privacy Policy explains what information Outsourced CFO Services, LLC ("CFODP," "we," "us," or "our") collects through CFO Sidekick (the "Service") at sidekick.cfodentalpartners.com, how we use and share it, how long we keep it, and the choices you have. CFODP's general website and advisory services are covered by the terms of your engagement with CFODP; this Policy applies to the Service.

• 1. Information we collect
• 2. How we use information
• 3. Artificial intelligence
• 4. Benchmark Data
• 5. How we share information
• 6. Data retention
• 7. Security
• 8. Your choices and rights
• 9. Protected health information
• 10. Businesses only; no children
• 11. Changes
• 12. Contact

1. Information we collect

Account information

Name, work email address, practice name, role, and login credentials. Passwords are stored only as salted hashes by our authentication provider; authenticator-app secrets are stored by that provider for the purpose of verifying your sign-in codes.

QuickBooks Online data

When your QuickBooks Online company is connected, the Service reads the following through Intuit's API, using read-only access: your chart of accounts (account names, numbers, and types); summary financial reports (profit and loss, balance sheet, trial balance, and similar) for the periods you or the Service request; company name and settings such as fiscal-year start; and the OAuth tokens Intuit issues so the connection stays active. Reports are retrieved when you run a task or ask a question, and may also be retrieved on a monthly schedule after the tenth of each month so your summaries and benchmarks stay current. The Service does not request customer or patient lists, invoices, payments, payroll records, bank account numbers, vendor records, or employee records, and does not write anything to your QuickBooks file.

Questions and outputs

The questions you type, the tasks you run, and the summaries and comparisons the Service produces.

Usage and technical data

Log data such as IP address, browser type, pages visited, timestamps, error reports, and the transaction identifiers Intuit attaches to API calls, collected by our hosting provider and the Service for security, support, and troubleshooting. The Service does not use advertising cookies or third-party analytics trackers. It uses a session cookie to keep you signed in.

Early-access sign-ups

If you join the waitlist at cfodentalpartners.com/sidekick, your name, email, role, and how you heard about us are stored in our email platform (ActiveCampaign) and used to contact you about Sidekick. You can unsubscribe from any message.

2. How we use information

We use information to provide the Service (connect to QuickBooks, generate summaries, answer questions, compare your practice to peers); to secure, support, maintain, and improve the Service; to create de-identified Benchmark Data as described in Section 4; to communicate with you about the Service, including service notices and changes to our terms; to comply with law and enforce our agreements; and, where you are a CFODP advisory client, to support the advisory services you have engaged us for.

3. Artificial intelligence

The Service uses large language models provided by Anthropic, PBC to categorize chart-of-accounts entries, summarize financial data, and answer questions. To do that, the relevant financial figures (report-level amounts and account names) and your question are sent to the model provider's API over an encrypted connection. Under our commercial agreement with the provider, that data is not used to train the provider's models and is retained by the provider only as needed to provide the service and enforce its policies. Outputs are automatically generated, may contain errors, and are decision support only; see the End-User License Agreement, Section 7.

4. Benchmark Data

We combine financial ratios derived from connected practices into aggregated statistics (for example, the median lab-fee percentage of collections for general practices). Before aggregation we remove practice names, addresses, tax identifiers, account-level transaction detail, and any free text that could identify a practice. We never display a benchmark drawn from fewer than five practices, and we never share an individual practice's figures with another client. Benchmark Data is not personal information. CFODP may retain and use Benchmark Data after you stop using the Service, as described in the End-User License Agreement, Section 8.

5. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Service providers that process data on our behalf under contracts restricting their use of it, all located in the United States: Google Cloud (application hosting, build, logging, and secret storage); Supabase (database and authentication); Anthropic (AI models, as described in Section 3); and ActiveCampaign (waitlist email only).
• Intuit, which operates the QuickBooks Online API and receives the connection and usage information required by its developer program.
• CFODP personnel who serve your account, including, if you are an advisory client, the team members assigned to your engagement. Access is limited by role and logged.
• Legal and safety recipients when required by law, subpoena, or legal process, or to protect the rights, property, or safety of CFODP, our clients, or others, or the integrity of the Service.
• A successor in connection with a merger, acquisition, financing, or transfer of all or part of the Sidekick business, in which case this Policy continues to apply to the transferred information.

6. Data retention

We may retain information longer where required by law, to resolve disputes, or to enforce our agreements.

7. Security

The Service is served only over HTTPS. QuickBooks tokens and other secrets are encrypted at rest with keys held in a managed key store separate from the database. Every user must sign in with a password and an authenticator-app code. Access to client data is restricted to the signed-in client's own practice and to authorized CFODP personnel, and access is logged and reviewed. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you without unreasonable delay and as required by law.

8. Your choices and rights

Disconnect QuickBooks at any time inside the Service or from QuickBooks Online (Apps → Connected apps). Disconnection stops data retrieval immediately and triggers deletion of our tokens within 24 hours.

Access, correction, deletion, and export. Email sidekicksupport@cfodentalpartners.com to ask us to correct or delete your account information, cached QuickBooks data, or saved questions and outputs, or to export them. We will verify your request and respond within 30 days. Deleting your account does not remove de-identified Benchmark Data already created.

Email. Unsubscribe from Sidekick marketing emails using the link in any message; we may still send service notices.

State privacy rights. The Service is provided to businesses and their authorized personnel. To the extent any state privacy law applies to personal information we process about you, you may have rights to access, correct, delete, or receive a copy of that information, and to appeal a decision, by contacting us as above. We do not sell personal information or use it for targeted advertising, and we do not discriminate against anyone for exercising these rights.

9. Protected health information

The Service is not designed to receive protected health information under HIPAA and does not request records that would ordinarily contain it. Please do not enter patient names or other individually identifiable health information into the Service. CFODP is not a business associate in providing the Service; see the End-User License Agreement, Section 6.

10. Businesses only; no children

The Service is offered to businesses and their authorized personnel and is not directed to individuals under 18. We do not knowingly collect information from children.

11. Changes

We will post updates at cfodentalpartners.com/sidekick-privacy and, for material changes, notify you by email or in the Service before they take effect. The "Last updated" date at the top shows the current version.

12. Contact

CFO Dental Partners · 776 E Riverside Dr, suite 208 Eagle, ID 83616 · sidekicksupport@cfodentalpartners.com · 208-297-3921.