Data Security

Last updated: November 7, 2026

Tieout handles sensitive financial data. This page describes how we protect it. Questions: hello@getprofittieout.com.

Access to your accounts

• Connections to Amazon Seller Central, Amazon Ads and QuickBooks Online use their official OAuth authorization. We never see or store your passwords.
• We request read-only access and only the data needed for financial reconciliation.
• Access tokens are encrypted at rest and you can revoke them at any time from Tieout or from the platform itself.

Data we do not store

We do not store your customers' personally identifiable information (names, addresses, phone numbers or emails). Financial reports are processed at the order and transaction level without buyer identity.

Encryption

• In transit: TLS 1.2 or higher on every connection.
• At rest: AES-256 encryption for databases, backups and stored files.

Infrastructure

The Service runs on established cloud providers with physical security, redundancy and regular patching. Customer data is logically separated by account, and each request is checked against the signed-in account.

People and access control

• Access to production systems is limited to authorized personnel on a least-privilege basis.
• Two-factor authentication is enforced on all company accounts.
• Access to systems holding customer data is logged and reviewed.

Retention and deletion

When you disconnect a platform or close your account, we delete the related data within 30 days.

Incident response

We maintain an incident response plan. If a security incident affects your data, we will notify you without undue delay and notify Amazon, Intuit and authorities as required.

Reporting a vulnerability

If you believe you've found a security issue, email hello@getprofittieout.com with the subject "Security". We appreciate responsible disclosure.