Who is responsible for your information
Zeno Budget is operated by Zeno Services, LLC. Where your organization uses Zeno Budget, your organization decides what data it connects and who may see it, and Zeno Services, LLC processes that data to provide the service to your organization.
Zeno Services, LLC
1040 E 13th St., Brooklyn, NY 11230, United States
Privacy questions and requests: [email protected]
The short version
Zeno Budget uses your sign-in details to know who you are, reads your organization's accounting data from QuickBooks with read-only access, and stores the budgeting plans your team enters. We do not sell your information, we do not use it for advertising, and we do not use it to train AI models. We share it only with the providers listed below, only to run the service.
What we collect
Sign-in and account information
You sign in to Zeno Budget with a Google, Microsoft or Intuit account. From whichever you choose, Zeno Budget receives your name, your email address, whether the provider has verified that address, a link to your profile picture if the provider sends one, and the identifier the provider gives your account. Zeno Budget asks these providers for basic profile information only (the openid, email and profile scopes) and nothing else from your account with them. Zeno Budget does not receive or store your password for any of them.
We also keep the organizations you belong to, your role in each, invitations sent to or by you (including the email address of the person invited), and when you last signed in.
QuickBooks accounting data
When an owner connects an organization's QuickBooks Online company, or its QuickBooks Desktop company file through Intuit's QuickBooks Web Connector, Zeno Budget reads and stores a copy of that organization's accounting data: the chart of accounts, classes, locations, customers, vendors, and transactions with their lines, dates, amounts and memos, together with basic company information. Zeno Budget's access to QuickBooks is read-only. It never creates, changes or deletes anything in QuickBooks. For QuickBooks Online, the authorization Intuit issues for the connection is stored encrypted and used only to read that company's data.
The plans you enter
Forecasts, templates, recurring forecasts, programs and how they map to QuickBooks classes and locations, budget cycles, change requests, approvals and comments, and the record of who did what and when.
AI assistant usage
If you connect an AI assistant (such as Claude or ChatGPT) to Zeno Budget's MCP server, we record which tool was called, when, for which organization, and whether it succeeded. We do not receive or store the rest of your conversation with the assistant.
Support access by Zeno staff
To answer a support request, a member of Zeno staff may view Zeno Budget as a member of your organization sees it. Only named staff can do this; each session records its reason, ends on its own within an hour at most, and shows a banner throughout, and every change made during it is logged. A support session cannot change billing, people or roles, or the QuickBooks connection.
Cookies
The Zeno Budget application sets one cookie: a session cookie that keeps you signed in. It does not use advertising or tracking cookies. The zenobudget.com website uses Google Analytics, which sets its own cookies to measure visits (see who we share with).
Logs
IP address, browser user agent, timestamps and request details, needed to run, secure and debug the service.
What we do not collect
Zeno Budget does not ask for, and you should not enter, payment card numbers, bank account credentials, Social Security or other government identification numbers, or health information. Billing is not yet live; when it is, card details will be entered directly with our payment processor, never received or stored by Zeno Budget, and this policy will name that processor.
How we use it
To sign you in and keep your account secure; to show each person what their role and programs allow; to read your organization's actuals from QuickBooks and show them beside its plan; to calculate cash flow, forecasts, budgets and the effect of change requests; to send the email the service needs, such as invitations and notices about change requests; to answer support requests; to detect and prevent abuse; and to meet legal obligations.
AI models
Zeno Budget does not train AI models and does not use your information, or your organization's data, to train any AI model, ours or anyone else's. If you connect your own AI assistant, that assistant's provider processes your requests and Zeno Budget's answers under its own terms and privacy policy, not ours. Zeno Budget sends data to an AI provider only because you connected that assistant and asked it something.
Information from Google
When you sign in with Google, Zeno Budget receives your name, email address, whether Google has verified it, your profile picture link and your Google account identifier, through the openid, email and profile scopes. Zeno Budget uses this only to sign you in, to show who you are to the other members of your organization, and to match you to the invitations sent to your address.
Zeno Budget's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use information received from Google to serve advertising; we do not sell it or transfer it to data brokers or others; we do not use it to train or improve AI or machine learning models; we transfer it only to provide or improve Zeno Budget's user-facing features, for security, or to comply with the law; and no person at Zeno reads it unless you ask us to, it is needed for security or to investigate abuse, or the law requires it.
You can remove Zeno Budget's access to your Google account at any time from your Google Account permissions.
Information from Microsoft and Intuit
Sign-in with Microsoft or with Intuit gives Zeno Budget the same basic profile information, used the same way and under the same limits as information from Google. Connecting QuickBooks is a separate authorization, given by an owner of your organization, and the accounting data it gives access to is described under what we collect.
Who we share it with
We do not sell personal information and do not share it for advertising. We share it only with these providers, only as needed to run Zeno Budget:
- Hetzner Online GmbH, which hosts the Zeno Budget application and database on servers in Ashburn, Virginia, in the United States.
- Cloudflare, Inc., which hosts the zenobudget.com website and provides its DNS and network.
- Postmark (ActiveCampaign, LLC), which delivers Zeno Budget's email.
- MXroute, which hosts the zenobudget.com mailboxes, for email you send us.
- Google, Microsoft and Intuit, as the sign-in provider you choose, and Intuit, for the QuickBooks connection your organization authorizes. See the Intuit privacy statement.
- Google Analytics, on the zenobudget.com website only, to count visits. See the Google privacy policy; you can opt out with the Google Analytics opt-out add-on.
- The other members of your organization, who see your name, email address and role, and the plans and requests you make, as their own roles allow.
- Legal and safety recipients, where the law requires it or where it is needed to protect our users, the public or us.
- A successor, if Zeno Budget is part of a merger, acquisition or sale of assets, under this policy.
Where it is stored
The Zeno Budget application and its database run on Hetzner servers in Ashburn, Virginia, in the United States. Zeno Budget is operated from the United States, and your information is processed and stored there. Zeno Budget is offered to organizations in the United States and Canada. If you are in Canada, using Zeno Budget transfers your information to the United States, where it is subject to United States law. Zeno Budget is not offered in the European Economic Area, the United Kingdom or Switzerland.
How long we keep it, and deleting it
- Your account: for as long as you have one. When you ask us to delete it, we delete it within 30 days, apart from records we must keep by law.
- An organization's QuickBooks copy and its plans: for as long as the organization uses Zeno Budget. Disconnecting QuickBooks stops the sync and ends our access, and changes nothing in QuickBooks. When an owner asks us to delete the organization, we delete its QuickBooks copy and its plans within 30 days.
- Records of who did what (approvals, change requests, support sessions): for the life of the organization, because they are what lets you see later why a budget is what it is.
- Logs: no longer than 12 months.
- Backups: deleted information can remain in encrypted backups for a limited time until they are replaced on their normal rotation.
Security
Each organization's data is kept in its own database schema. Connections are encrypted with HTTPS. The QuickBooks authorization is stored encrypted and is never shown to an AI assistant. Every support session by Zeno staff is limited in time and logged. No system is perfectly secure, and we do not claim otherwise. Report a security concern to [email protected].
Your choices and rights
You can see and correct your account information, leave an organization, revoke an AI assistant's access, and ask us to delete your account. An owner can disconnect QuickBooks at any time and can ask us to delete the organization's data. Depending on where you live, you may have the right to access, correct, delete or port your personal information, to restrict how it is processed, and to appeal a refusal. Email [email protected] to use any of these rights. We answer within 45 days and tell you if we need longer. We will not treat you differently for using them.
Children
Zeno Budget is a product for organizations, is not directed to children, and we do not knowingly collect information from anyone under 18.
Changes to this policy
When this policy changes we update the effective date above, and we tell you in the product before a material change takes effect.
Contact
Email [email protected], or write to Zeno Services, LLC, 1040 E 13th St., Brooklyn, NY 11230, United States.
If you are in Canada and are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada. In the United States, residents of some states may appeal a refusal and may contact their state attorney general.