Privacy Policy
Last updated October 10, 2026
Next Level Live ("the app") is a private financial dashboard run by Next Level CPA PLLC ("Next Level CPA", "we", "us"), a CPA firm based in North Carolina that serves clients nationwide. This policy explains what the app collects, how it is used and protected, and the choices you have. It covers the app only. Our accounting and tax services are also covered by your engagement letter, and if the two ever conflict, the engagement letter controls.
Who can use the app
The app is for our business clients and our own staff. Accounts are created by invitation only; nobody can sign themselves up. Every sign-in needs your email, your password and a 6-digit code from an authenticator app.
What we collect
- Your sign-in details: your email address, your password (stored only as a one-way hash by our authentication provider, never readable by us) and your authenticator-app setup.
- QuickBooks Online data, read only. When your business connects its QuickBooks Online company, we receive access through Intuit's official sign-in (OAuth 2.0). Our app only reads; it never creates, changes or deletes anything in your books. Once a day (and when our staff press "Sync now") it pulls:
- your company name;
- a monthly Profit and Loss report covering about the last 24 months, and a Balance Sheet covering about the last 12 months;
- the total of customer invoices more than 30 days past due (from the A/R aging report);
- open customer invoices and unpaid vendor bills: the customer or vendor name, due date and amount still open (no invoice contents, contact details or payment information);
- vendor-level expense summaries from purchases and bills: date, vendor name, amount and expense account. Bank and card number fragments are removed from account names before anything is saved.
- Staff notes: items our team adds for you, such as "This month's move", Profit First targets, and which money tips we approved.
- Basic records: when a QuickBooks connection was made or removed and by which staff user, and a log of each sync (time, status and row counts, never your numbers or tokens).
How we use it
Only to provide accounting and advisory services to your business: to show you your dashboard, and to help our team review your books and advise you. Specifically:
- We do not sell your data or share it for anyone else's marketing.
- The app has no advertising and no third-party analytics or ad trackers.
- We do not use your data to train AI models, and we do not combine it with other clients' data in a way that identifies you.
- Each client sees only their own company. Our staff can see the companies we serve so they can do the work. Every database read is filtered by row-level security tied to your sign-in.
Tax return information (IRC §7216)
The app shows your books, not your tax returns. We do not put tax return information into the app, and we do not use or disclose tax return information for any purpose other than preparing your return without your prior written consent, as Internal Revenue Code section 7216 requires. Tax returns and tax documents stay in our separate client portal.
Where it is stored and how it is protected
- Hosting: the app runs on Vercel. Data is stored in a Supabase (PostgreSQL) database in the United States (US East region), which encrypts stored data at rest.
- QuickBooks access tokens are encrypted by the app with AES-256-GCM before they are saved, using a key kept only in the server environment. They are never sent to your browser, and no signed-in user, including our staff, can read them.
- All traffic uses HTTPS. Sign-in sessions use secure, HTTP-only cookies and end after at most 12 hours.
- Pages with financial data are marked so browsers and shared caches do not store copies.
No system is perfectly secure. If we learn of a breach that affects your personal information, we will notify you as North Carolina law requires.
Who else handles the data
We use these service providers only to run the app. They process data on our behalf and under their own security programs:
- Intuit Inc. (QuickBooks Online, the source of your financial data and the sign-in you approve);
- Supabase (database and sign-in);
- Vercel (hosting).
We may also disclose information when the law requires it, for example a valid subpoena, or with your consent.
How long we keep it, and deleting it
- Disconnecting QuickBooks: you can disconnect at any time from inside QuickBooks (Apps, then Disconnect) or by asking us. When our staff disconnect, the access is revoked at Intuit and the stored tokens are deleted immediately. When you disconnect from inside QuickBooks, the tokens are deleted at the next daily sync.
- Synced financial data is deleted within 30 days after you disconnect or ask us in writing, unless you ask us to keep it during an active engagement. Copies in our database provider's automatic backups expire on the provider's normal schedule.
- Your account: we remove app access when our engagement ends or when you ask. Records we must keep as your CPA firm (for example our workpapers) are kept under our professional record-keeping rules, separately from this app.
Cookies
The app uses only cookies it needs to work: your sign-in session and, during a QuickBooks connection, a short-lived security code. Your light or dark theme choice, and what-if settings you type into some calculators, are saved only in your own browser. No advertising or tracking cookies.
Your choices and requests
You can ask to see, correct or delete your information, or to disconnect QuickBooks, by emailing info@sargiscpa.com or calling (704) 981-1191. We answer within 30 days. We may need to confirm your identity first.
Children
The app is for businesses and is not meant for anyone under 18.
Changes
If we change this policy, we update the date at the top. If a change is significant, we tell you by email or in the app before it takes effect.
Contact
Next Level CPA PLLC
North Carolina, serving clients nationwide
info@sargiscpa.com · (704) 981-1191
See also our Terms of Use (End-User License Agreement). QuickBooks is a trademark of Intuit Inc.