**Sir Scansalot — Privacy Policy**

Last updated: September 10, 2026

Sir Scansalot is an internal tool operated by Goodwin’s Market, 24089 Lake Gregory Dr., Crestline, CA 92325.

It is used only by our own staff, on our own company data. We do not offer it to the public and it

has no customers, accounts or sign-ups.

**What it handles.** Supplier invoices and vendor statements that we scan on our own scanner, and

the information printed on them: vendor name, invoice number, date, amounts, terms and line items.

These are business records between Goodwin’s Market and our suppliers. The app is not designed for

and is not used on consumer or personal information.

**What it reads from QuickBooks Online.** With the accounting permission you grant when you connect

the app, it reads the vendor list, chart of accounts, classes and existing bills, so it can match an

invoice to the right vendor and account and avoid entering the same invoice twice. It creates bills,

vendor credits, vendors and file attachments, and it can delete a transaction it created itself —

when an invoice turns out to be a credit rather than a bill, the original is deleted and re-created

in the correct form. It does not read payroll, customers, banking or personal data, and it never

deletes anything it did not create.

**Where the data lives.** On one Windows computer in the Goodwin’s Market office: the scanned PDFs

in a local folder, the extracted values in a local database file. Nothing is published, and there is

no company server or public website holding it.

**Who else sees it.**

– *Intuit (QuickBooks Online)* — receives the bills we approve and the invoice PDF attached to each.

– *Anthropic* — invoice page images are sent to Anthropic’s Claude API to read the printed text.

  Anthropic does not use data submitted through its API to train its models.

– *WorkOS* — if the optional work-email sign-in is enabled, it sees only the email address of the

  employee signing in.

We do not sell, rent or share this information with anyone else, and we do not use it for

advertising or analytics.

**Credentials.** The QuickBooks connection tokens are stored on that same office computer and are

never displayed, logged or shared. The app’s client ID and secret are kept in a local environment

file, not in the source code.

**Retention and deletion.** Invoices and their PDFs are kept as accounting records for as long as we

are required to keep supplier records, then deleted. Disconnecting the app from QuickBooks Online

removes its stored tokens immediately and ends all access.

**Contact.** phil@goodwinsmarket.com, (909) 338-1705.