JMI Invoice Automation — Privacy Notice

Effective September 26, 2026

This notice applies only to JMI Invoice Automation, an internal billing tool operated by JMI Reports LLC. It does not replace the privacy notice for the broader BlueSkyVUE website or software.

Current status

The production app verifies an authorized operator's Google sign-in and is connected to JMI's live QuickBooks company for read-only checks. Production invoice creation and invoice sending remain disabled. A separate protected staging version is being tested for monthly workbook preparation and batch review. The data practices below describe the current service and the planned billing workflow. JMI will update this notice before enabling production invoice processing if those practices differ.

Information and use

The app processes the operator's Google identity and technical/security logs to restrict access and diagnose problems. It reads authorized QuickBooks accounting information for connection and billing-readiness checks. When enabled, the monthly billing workflow will process JMI-supplied BlueSkyVUE invoice spreadsheets, authorized order data from JMI's private Google Cloud Storage exports, and QuickBooks Online company, customer, item, invoice, and attachment information authorized by JMI. It will use that information to reconcile billing, prepare supporting workbooks, apply approved credits, and create unsent invoices with attachments after one monthly batch approval. The app will not automatically email invoices or process payments. The operator will send invoices manually in QuickBooks.

Services and sharing

JMI uses Google Cloud for the app's hosting, sign-in protection, private storage, and operational logging. The app exchanges authorized accounting information with Intuit QuickBooks Online. Order data originating in Domo is obtained through JMI's private Cloud Storage exports, not by a direct Domo connection in this app. JMI does not intend to sell QuickBooks data or use it for advertising. Access is limited to JMI-authorized personnel and providers needed to operate the workflow.

Security

The service is protected by Google sign-in and Identity-Aware Proxy. Production QuickBooks credentials are held in Google Secret Manager, and the app encrypts its stored QuickBooks tokens. Production read-only connection and token refresh have been verified. JMI is testing the additional controls for monthly billing before enabling invoice creation.

Retention

Uploaded and generated workbooks, detailed billing run records, and ordinary app diagnostic logs follow JMI's 30-day app retention policy. To help prevent duplicate billing, the app may retain a minimal billing receipt for one year. That receipt contains the billing month, QuickBooks invoice and attachment record identifiers, file and approved-plan fingerprints, a hashed customer/month billing key, and operation status and timestamps. It does not contain worksheet contents, order details, customer names or contact information, amounts, or credentials. Retention enforcement must be verified before production invoice processing is enabled.

The project's ordinary Google Cloud logs have a 30-day retention setting. Google's locked required audit-log bucket has a separate 400-day setting. QuickBooks invoices and attachments stored in QuickBooks follow JMI's QuickBooks and records policies, not the app's workbook retention period. A legal hold or other applicable obligation may require longer retention. This notice will be updated if the production logging or retention arrangement changes.

Questions and requests

For privacy or security questions, or to request access, correction, or deletion of information handled by this app, contact nathan@jmireports.com. JMI will evaluate requests under its applicable agreements and law. Changes to this notice will be shown by updating the effective date on this page.