Privacy Policy

The Vanity Portrait Studio · last updated 16 August 2026

Who this covers

TVPS Sync is a private integration operated by The Vanity Portrait Studio for its own use. It has no public users, no sign-up, and no user accounts. It processes The Vanity Portrait Studio’s own business records, which include personal information about The Vanity Portrait Studio’s clients and contacts.

What it accesses

From Salesforce, using a service account limited to the objects it needs: opportunities and their line items, products, price books, accounts, contacts, and quotes.

From QuickBooks Online, using the accounting scope only (com.intuit.quickbooks.accounting): customers, items, invoices and payments. No payment-processing scope is requested and no card or bank details are ever accessed.

What it stores, and where

A PostgreSQL database hosted by Railway in the United States holds:

• OAuth access and refresh tokens for QuickBooks Online
• Identifier mappings between Salesforce records and QuickBooks objects
• Synchronisation cursors and feature flags
• An audit log of each operation, which includes the request payloads sent to QuickBooks — these contain client names, billing email addresses, billing addresses, line-item descriptions and amounts
• A dead-letter queue of failed operations, with the same content

Access to the database is restricted to The Vanity Portrait Studio. All connections to Salesforce and Intuit use TLS.

What it does not do

• No data is sold, rented, or shared with any third party
• No advertising, profiling, tracking or analytics of any kind
• No card numbers, bank account details or payment credentials are accessed or stored
• No data is transferred outside Salesforce, Intuit and the Railway-hosted database

Retention and deletion

Identifier mappings are retained for as long as the integration operates, because they are what prevents duplicate records. Audit-log and dead-letter entries are retained for operational troubleshooting and may be purged at any time without affecting the integration. Any record can be deleted on request to the address below.

Revoking access

The Vanity Portrait Studio can revoke the Software’s access to QuickBooks Online at any time from within QuickBooks. See disconnecting. Revoking access stops all synchronisation immediately.

Sub-processors

• Intuit — QuickBooks Online, the accounting system of record
• Salesforce — the CRM system of record
• Railway — hosting for the service and its database

Questions: colson@thevanityportraitstudio.com