KDH Agent Privacy Notice

Effective October 15, 2026. Updated October 16, 2026. This notice applies to the internal KDH Agent application operated by Kingdom Diversified Holdings LLC.

Operator and purpose

Kingdom Diversified Holdings LLC operates KDH Agent for its internal accounting, invoice preparation and payment reconciliation. It is not offered to the public.

Information processed

The application may process authorized QuickBooks company, customer, account, invoice, payment, sales receipt, deposit and expense records, together with client contact details, invoice drafts, review decisions and operational history.

Use and access

The owner is currently the sole authorized user and uses this information to review accounting records, prepare invoices, suggest classifications, reconcile payments and approve specific accounting changes. Suggestions require human review. Recording a payment against an existing invoice must not create a second sale.

Storage and services

The current Agent stores operational records on the business Mac. QuickBooks credentials and refresh tokens are stored in macOS Keychain. Authorized connections exchange data with Intuit and Microsoft for accounting and Outlook draft preparation. The owner may use OpenAI ChatGPT/Codex to review relevant accounting information and a locally operated model for on-device work. Information provided to ChatGPT/Codex is processed by OpenAI under the applicable account settings and service terms; this notice does not promise that all processing stays on-device or make unverified claims about provider retention or training practices.

Public pages and connection return

Shopify hosts the public information pages. The active QuickBooks sign-in callback is hosted on Cloudflare Workers over HTTPS. Cloudflare receives the incoming request, which may include a short-lived authorization code and connection identifiers. The callback responds with an empty-body redirect to a clean URL and does not load tracking scripts. The handoff is encrypted for the local Agent before application storage; the decryption key stays on the Mac. The application rejects handoffs after ten minutes and requests deletion on expiry or successful acknowledgement. It does not store QuickBooks client secrets, access tokens or refresh tokens in the callback service.

Workers Logs and Traces were verified disabled on October 16, 2026. This does not establish that Cloudflare retains no infrastructure records or recovery copies. The ten-minute limit governs application use, not guaranteed physical erasure from every provider system. Cloudflare documents a point-in-time recovery feature covering up to 30 days for the SQLite-backed storage used by the handoff. We have not independently verified how deletion affects every provider-held recovery copy. Provider processing and retention remain subject to the applicable Cloudflare service practices.

Retention and deletion

The owner has adopted a retention schedule of seven years for finalized invoices, accounting records and approval history, and 90 days for temporary import files and troubleshooting logs. Credentials must not be placed in temporary import files or troubleshooting logs. A read-only retention review identifies candidates for owner review and holds active, unresolved or unclassified records. No automatic expiry or deletion of these business records, temporary files or troubleshooting logs is enabled. The short-lived sign-in handoff described above has a separate expiry and cleanup process. Removal of live records or backup copies requires a separate review and approval, so the stated periods are retention targets, not a promise of automatic deletion on a specific date. Records needed for an unresolved matter or an applicable recordkeeping obligation may require longer retention. Revoking a connection does not itself erase accounting records, saved previews or operational history.

Send access, correction or deletion requests to kingdomholdingsus@gmail.com. The owner reviews the request, verifies the requester’s authority and determines which records can be deleted and which must be retained. Deletion from the Agent does not itself delete records held in QuickBooks, Outlook or other provider systems.

Encrypted backups and recovery

The Agent is configured to prepare one encrypted backup daily after 3:00 AM America/New_York, with periodic catch-up checks while the Mac is running and the owner is logged in. The backup is encrypted locally with AES-256-GCM before being placed in Apple iCloud Drive. macOS manages remote synchronization, which depends on connectivity, available storage and iCloud availability. Each run verifies the encrypted package and its local iCloud Drive copy; this does not independently confirm remote upload on every run.

Backups include Agent accounting records, approval history, client and invoice settings, saved artifacts, runtime records, application source and selected configuration. Keychain credentials, authentication caches, environment files, service logs and build caches are excluded. External source documents and local model weights are not covered. Provider sign-in may be required after recovery. The working encryption key is kept in macOS Keychain, with a recovery copy retained separately by the owner in a password manager; the key is not uploaded with the backup.

An encrypted snapshot was verified on iCloud.com, independently downloaded and restored on October 15, 2026, with all 2,152 included files matching their recorded checksums. This verifies that snapshot and does not guarantee future backup availability. Backup copies are not currently pruned automatically. Deletion requests must also consider retained backup copies and provider-held records. Apple processes the stored encrypted files under its applicable service practices.

Contact

For questions about this internal application or its data handling, contact kingdomholdingsus@gmail.com.