Effective date: 8 September 2026

1. Who we are

Once Capital Reporting (the “Application”) is an internal software tool developed and operated by Once Capital Management LLC (“Once Capital”, “we”, “us”), 450 Park Avenue, Suite 2702, New York, NY 10022, United States.

The Application is not offered, sold, or licensed to the public. It exists solely to allow authorized Once Capital personnel to read Once Capital’s own accounting records and produce internal financial reports.

2. What data the Application accesses

The Application connects to Once Capital’s own QuickBooks Online company file through Intuit’s Accounting API, using the com.intuit.quickbooks.accounting permission scope only.

Within that scope it reads accounting records belonging to Once Capital, which may include:

• the chart of accounts, journal entries, and the general ledger;
• financial statements and reports, including profit and loss, balance sheet, and trial balance;
• transactions such as invoices, bills, payments, and expenses, together with the customer and vendor names recorded against them.

The Application operates in read-only mode. It does not create, alter, or delete any record in QuickBooks Online.

3. What we do not access

The Application does not request or receive:

• payment card numbers, bank account credentials, or payment instruments;
• payroll data, or any Intuit permission scope beyond accounting;
• data belonging to any QuickBooks company other than Once Capital’s own.

4. Why we process this data

The sole purpose is internal financial reporting and analysis for Once Capital: preparing management reports, reconciling accounts, and supporting the firm’s own bookkeeping, audit, and regulatory obligations.

The data is not used for advertising, profiling, or automated decision-making, and it is not used to train machine learning models.

5. Storage and retention

Data retrieved from QuickBooks Online is stored on workstations and storage controlled by Once Capital, protected by the firm’s standard access controls. Access credentials are held locally and are not embedded in any distributed software.

Retrieved data is retained for as long as it is needed for the reporting purpose described above, and in any event no longer than required by the recordkeeping obligations that apply to Once Capital.

6. Disclosure to third parties

We do not sell, rent, or trade this data. We do not share it with third parties for their own purposes.

Data may be disclosed only:

• to Once Capital’s professional advisers, auditors, and administrators, bound by confidentiality obligations, in the ordinary course of the firm’s business;
• where disclosure is required by law, regulation, or a lawful request from a competent authority or regulator.

7. Your choices

Because the Application accesses only Once Capital’s own accounting records, it does not process personal data of external users through this integration, beyond the customer and vendor names already recorded in the firm’s books.

An administrator of the QuickBooks Online company may revoke the Application’s access at any time in QuickBooks Online, under Settings → Apps. Revocation takes effect immediately and stops all further data retrieval.

8. Security

Access is authorized through Intuit’s OAuth 2.0 flow. The Application holds no QuickBooks username or password; authorization tokens are stored on Once Capital-controlled systems and can be revoked by Once Capital at any time as described above.

9. Changes to this policy

We may update this policy from time to time. The effective date above indicates when it was last revised.

10. Contact

Questions about this policy may be directed to:

Once Capital Management LLC
450 Park Avenue, Suite 2702
New York, NY 10022, United States
info@oncecapital.com / luca@oncecapital.com