Privacy Policy
Last updated February 2026
Who we are
The Hot Girl CFO dashboard (“the Service”) is operated by The Hot Girl CFO. The Service is a private, invite-only financial reporting workspace used by our accounting practice and the clients we serve.
Information we collect
- Account information: name, email address, and role within a firm or client workspace.
- Financial data retrieved with your authorization from QuickBooks Online or Count, including profit and loss, balance sheet, and related accounting reports.
- Documents and statements you upload (PDF, image, spreadsheet, or CSV).
- Practice data you enter: goals, questionnaire answers, tasks, notes, budgets, and messages.
- Technical logs: sign-in attempts, IP address, browser user agent, and integration error records (including Intuit transaction IDs) used for security and troubleshooting.
How we use it
We use your information only to operate the Service: producing reports and dashboards, syncing your accounting data, communicating about your engagement, securing accounts, and diagnosing errors. We do not sell personal or financial information, and we do not use it for advertising.
QuickBooks Online data
We access QuickBooks only through Intuit’s authorized OAuth 2.0 flow, with read access to accounting reports. Access and refresh tokens are encrypted at rest and are never exposed to browsers. You can disconnect at any time from Integrations inside the app or from within QuickBooks; on disconnect we revoke the token and delete the stored credentials. Financial data already synced into your reports is deleted on request.
Generative AI
The Service can draft report summaries, recommendations, notes, and text messages using a generative AI model accessed through a secure gateway. Drafts are reviewed and approved by a human before a client sees them. Data sent to the model is limited to what is needed to write the draft, and is not used by us to train models.
Security
Data is stored with an encrypted, access-controlled managed database provider. Row-level security scopes every record to its firm. Third-party credentials are encrypted with AES-256-GCM. Access is invite-only and firm users may enable multi-factor authentication. Repeated failed sign-in attempts are rate limited and logged.
Retention and deletion
Security and integration logs are retained for up to 90 days. Client financial records are retained for the life of the engagement plus any period required by law. To request deletion of your data, contact us using the details below and we will respond within 30 days.
Your choices
You may request access to, correction of, or deletion of your personal information, and you may revoke any accounting integration at any time. Text messages are only sent to clients who opt in and can be stopped on request.
Contact
Questions about this policy? Reach us at meaghan@thehotgirlcfo.com or through the support form.
See also our End User License Agreement.