Privacy Policy — SG Golden Star

Last updated: 2026-10-08

SG Golden Star ("the App") is operated by SGGoldenStar. It shows a household's or a small business's books in plain words. It can connect to QuickBooks Online, or be used on its own. This page says what the App collects, what it does with it, what it keeps, and how you can have it deleted.

What we collect

• Your account. The email address you sign in with and the name you give your books. Your password is never kept; only a scrambled check of it (a "hash") is. Only you choose it: nobody else on your books can set it or change it for you. If you turn on the second sign-in step, the App keeps, encrypted, either the secret behind your authenticator app's codes or the phone number your codes are texted to; only its last four digits are ever shown.
• Your QuickBooks Online data, if you connect it. With your permission through Intuit's own sign-in (OAuth 2.0), the App reads your company's accounting data: transactions (bills, invoices, payments, deposits and similar records), accounts and categories, customers, vendors and items, attachments such as receipts, and QuickBooks reports.
• Bank data, only if you link a bank or bring in a bank file. If you link a bank account through Plaid, the App receives that account's name, balance and transactions. If you bring in a file from your bank, the App keeps the rows in it.
• Your books, if you keep them in the App. The entries (date, amount, accounts and notes), your list of accounts, the names of your customers, vendors and tenants, and anything else you enter, such as rent and loan details.
• Files you add. The bank files you bring in (the rows in them are kept, with the file's name; the file itself is not), and the receipts you add: the photo or PDF, and the amount, date and store name read from it.
• The Activity log. Who changed what in your books and when: the person's email, what they did, and the old and new value. The owner and anyone who may change the books can read it.
• What you and your people enter. Notes, questions and answers, suggested changes, tags, settings, and the people you add to your books with what each may see and do. If you ask for custom work, what you wrote is emailed to the person who runs the App.
• Access keys, only if you make one so another program can read your books. The key is shown to you once; only a scrambled check of it is kept.
• Payment, only if you pay. Stripe takes your card. The App never sees or keeps your card number; it keeps Stripe's reference numbers for your plan and whether it is paid.
• Your first steps. The first time each set-up step happens (you signed up, picked how to bring your money in, linked a bank, got your first rows, sorted them all, made a budget, added a card, paid), the App notes the step, the day and the email of the person who did it. The person who runs the App sees only how many people reached each step, to find where new people get stuck. Deleting a book deletes the steps noted for it.
• Technical records. Your sign-ins, and standard request logs kept by our hosting provider, for security and to fix problems.
• Visits to our public pages. On get.sggoldenstar.com (front page, price and guides) we count visits and record how the page is used (pages seen, clicks, and a screen replay with anything typed hidden), to make the page better. This is not done inside the App.

How we use it

Only to run the App for you: to show your books to you and to the people you add, to make the changes a person with permission asks for, to send the emails the App sends (sign-in links, questions, reports you set up, and late-rent notices to the landlord), and to keep the App secure and working. We do not sell your data, do not use it for advertising, do not build profiles from it, and do not use it to train any AI or machine-learning model.

Changes to your books

The App writes to QuickBooks only when a person on your books who has been given permission to change them asks it to, one change at a time or a batch they have checked first. People given permission to suggest can only send a suggestion for someone else to approve. Every change is recorded with who made it and when.

If you keep your books in the App, the same permissions apply, and a change is saved in the App's own books. An entry that is cancelled is marked cancelled and stays in the history; it is not erased.

How we store and protect it

Your data is stored with Cloudflare, which encrypts it at rest. Your QuickBooks and bank connection keys, the secret behind your authenticator app's codes and the phone number your codes are texted to are encrypted again with AES-256-GCM, are kept on the server only, and are never sent to a browser. You sign in with your email and your password, and you can add a second step: a 6-digit code texted to your phone or shown by an authenticator app. The App may ask everyone for that second step. All connections use HTTPS.

Who can see it

Anyone can make an account with an email address. A company's books can be seen only by the people added to that company by its owner or bookkeeper, and each person sees only the pages and can do only the things they were given. No person can see another company's books unless they were added to it.

Service providers

The App uses Intuit (the QuickBooks Online API, the source of your QuickBooks data), Cloudflare (hosting, storage, sign-in, sending email, and reading receipts), Plaid (only if you link a bank), Stripe (only if you pay) and a texting company that sends your sign-in codes (only if you choose codes by text: it receives your phone number and sends the code; the App never sees the code). They handle data only to provide their service to the App. We do not sell, rent or share your data with anyone else.

What we keep, and deleting it

The App does not delete your data on its own. It keeps what is listed above for as long as your account and your books are in the App:

• If you disconnect QuickBooks, the App stops reading your books at once and throws away its QuickBooks connection keys. The copy of your books already in the App stays, with your notes and history, so nothing is lost by a mistaken click.
• If you remove a bank, the App asks Plaid to end the connection. Rows already brought in stay. Rows the bank had not finished yet are removed.
• If a book is not paid, it becomes look only, and nothing is deleted. After 30 days look only, its banks are removed at Plaid the same way.
• If you cancel an entry in books kept in the App, the entry is marked cancelled and stays in the history.
• If a person is removed from your books, they lose access at once. The changes they made stay in the history, with their email.

The owner of a book can delete it, and all its data, at once and without writing to anyone: on the Settings page, under Danger zone, press Delete this book and type the book's name. That erases every row, receipt, note, person and setting of the book, ends its bank links, disconnects QuickBooks and stops the monthly payment. We keep one line saying the book was deleted, when, and by whom, with no figures in it.

To have your data deleted another way, write to support@mail.sggoldenstar.com from the email on your account and say which books. We delete it within 30 days and write back when it is done. Data held inside QuickBooks itself is governed by Intuit's policies, not this one.

Children

The App is not meant for children under 13, and we do not knowingly collect their information.

Changes to this policy

If this policy changes, we update this page and the date at the top.

Contact

Questions about this policy, or a request to delete your data: write to support@mail.sggoldenstar.com.