Truepennyby Kinmoor

Privacy policy

Last updated October 31, 2026

Truepenny is made by Kinmoor Studios LLC ("Kinmoor", "we"). It prepares a business's Shopify payouts for its QuickBooks Online books. This policy explains what Truepenny collects, why, and what you can ask us to do with it. Questions go to josh@kinmoorstudios.com.

What we collect

  • Your account: name, email address, a hashed password, and your authenticator app's secret (encrypted). Sign-in times and the IP address of actions you take, in the Activity log.
  • From QuickBooks Online, once your company connects it: the company's name, customer and account names, invoices and credit memos for the customers you choose (numbers, dates, amounts and balances), the closing date of your books, and the payments and journal entries Truepenny posts. To catch a payout booked twice and to explain your Shopify Clearing account, it also reads: deposits and sales receipts dated near each payout (date, amount, number, memo, customer name and the account they went to), the entries in your Shopify Clearing accounts, and payments and journal entries dated near each payout. What it finds that bears on a payout (a matching deposit, say) is kept with that payout.
  • From QuickBooks reports you upload, until QuickBooks is connected (A/R Aging Detail and Journal): the company's name, open invoices and credit memos (numbers, customers, dates, amounts and balances), and from the Journal only your stores' customers' invoices, payments and credit memos, invoices for orders in your payouts (totals only), and journal entries that touch your Shopify Clearing accounts. The rest of those reports, such as payroll, bills and other customers' sales, isn't kept, and neither is the file itself. From SaaSant import files you upload: your stores' customers' payments (reference, date, deposit account, and each invoice paid with its amount).
  • From Shopify: Shopify Payments payouts and their transactions (order numbers, amounts, fees, dates, payout status, card brand and payment method name), from files you upload or, once connected, from Shopify, along with the store's name, Shopify address and time zone. We do not receive card numbers or your customers' names, addresses or contact details.
  • Shopify files you upload are kept exactly as uploaded, so every posted entry can be traced to its source.

How we use it

Only to provide Truepenny to your company: to prepare payouts, to post entries to your books when a person in your company approves them, to show who did what, to keep the service secure and working, and to answer you. We don't sell personal or company data, we don't use it for advertising, and we don't use it to train AI models.

Who else handles it

A few service providers help us run Truepenny, under contracts that limit them to doing that: hosting and database (Render, in the United States), email delivery, and error reporting. Intuit and Shopify receive what Truepenny sends to them on your behalf, under their own terms. We share data with others only if the law requires it.

How it's protected

  • Every person signs in with a password and an authenticator app.
  • Each company's data is kept apart twice: by the app, and by the database itself.
  • Connections to QuickBooks and Shopify are encrypted at rest, and all traffic is encrypted in transit.
  • Nothing posts to your books without a person approving it, and every action is recorded in a log that can't be edited.

How long we keep it

While your company uses Truepenny. When a company closes its account, we delete its data within 90 days, except records the law requires us to keep. Disconnecting QuickBooks or Shopify in Truepenny deletes Truepenny's access keys straight away, so it can't read or post any more; the connection's name and when it was made stay on record. Disconnecting from inside QuickBooks or Shopify stops it working at once. Data already prepared stays until the account closes or you ask us to delete it.

Your choices

You can ask to see, correct, export or delete your personal data or your company's data by writing to josh@kinmoorstudios.com. We'll answer within 30 days.

Changes

If this policy changes, we'll update this page and the date above, and email account owners about any change that matters.