Privacy Policy — RQM Books Connector for Claude

Publisher: Digital Innovative Agency FZ LLC ("we", "us") Product: the RQM Books connector for Claude ("the Connector") Last updated: 21 September 2026 Effective: on publication at https://rqmbooks.com/legal/claude-connector-privacy

Before publishing: the bracketed items below are the only gaps — registered address, contact mailbox, and your sub-processor list. Have a UAE-qualified lawyer review this before it goes live. It is drafted to satisfy Anthropic's directory requirement, which is not the same as satisfying every law that applies to you.

1. What this policy covers

This policy covers the Connector only: the software that lets Claude, made by Anthropic, read and write data in your RQM Books company when you authorize it to.

It does not replace the RQM Books Privacy Policy, which governs the RQM Books application itself. Where the two differ on the Connector, this policy governs.

The Connector is not operated by Anthropic, and Anthropic is not a party to this policy. Data that reaches Claude is governed by Anthropic's own terms and privacy policy.

2. What we collect

Accounting data you ask for. When you or Claude invokes a tool, the Connector fetches exactly the records that tool covers — invoices, customers, items, chart of accounts, manual journals, VAT figures, financial reports — from your RQM Books company, and returns them to Claude. Depending on what you ask, this can include customer names, email addresses, telephone numbers, VAT registration numbers, billing addresses, transaction amounts and dates.

Authorization data. When you connect, we store: the OAuth client identifier of the application, the permissions (scopes) you approved, your company identifier, your user identifier, and a hashed refresh token. We do not store your password, and the Connector never sees it.

Operational logs. We log the time of each request, the tool invoked, the HTTP status returned, your company identifier and a random request identifier, for security monitoring and fault diagnosis.

3. What we do not collect

• We do not store the contents of your Claude conversations.
• We do not store copies of the accounting records passing through the Connector. Data is fetched per request, returned, and not retained.
• We do not read your Claude chat history, memory, or files.
• We do not collect payment card or bank account details through the Connector. It has no access to payment, subscription or billing functions — those routes are blocked at the server.
• We do not use your data to train any machine learning model, ours or anyone else's.
• We do not sell your data, and we do not share it for advertising.

4. How we use it

Solely to carry out what you or Claude asks: retrieving records, running reports, and creating or amending documents within the permissions you granted. Operational logs are used only for security, abuse prevention, and diagnosing faults.

5. Who else sees it

Anthropic. Data the Connector returns is delivered to Claude and is then handled under Anthropic's Privacy Policy. Sending your accounting data to Claude is the point of the Connector, so consider what you ask it before you ask.

Our infrastructure providers. The Connector runs on our hosting infrastructure:

• Amazon Web Services (hosting), region us-east-1 (N. Virginia). The Connector runs here.
• MongoDB Atlas (database). Your accounting records are stored here.

The RQM Books application also uses Stripe (payments), OpenAI (AI features), Elastic Email (transactional email) and Google Firebase (push notifications). The Connector does not send your data to these services.

We do not share Connector data with anyone else, other than where we are legally compelled to. If we receive a binding legal demand for your data, we will notify you unless prohibited by law.

6. Where it is stored, and for how long

Your accounting data remains in RQM Books, stored as described in the RQM Books Privacy Policy. Connector requests are processed in AWS us-east-1 (N. Virginia). Your accounting records are stored in MongoDB Atlas.

7. How it is protected

• All traffic uses HTTPS.
• Access requires OAuth 2.0 with PKCE. Access tokens expire within one hour and are bound to a single company and a single service.
• Refresh tokens are stored hashed and rotated on every use; a reused token is treated as compromised and revoked.
• The Connector cannot exceed the permissions you approved, and it cannot exceed your own role and permissions inside RQM Books.
• Administrative, subscription and payment areas of RQM Books are unreachable through the Connector by design.

8. Your choices

Disconnect at any time. RQM Books → Settings → Connected applications → Disconnect. Access ends within the hour, when the current access token expires.

Grant less. You choose which permissions to approve on the consent screen. Read-only access is a valid choice and the Connector works with it.

Access, correct, or delete your data. Your accounting records are yours and live in RQM Books, where you can view, amend and export them directly. For Connector authorization records and logs, contact us at the address below.

Depending on where you are, you may have rights under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the GDPR, or other laws, including rights of access, rectification, erasure, restriction, portability and objection. We honour these regardless of whether they apply to you by law.

9. Children

RQM Books is a business product and is not directed at anyone under 18. We do not knowingly collect personal data from children.

10. Changes

We will post any change here and update the date above. If a change materially affects how Connector data is handled, we will notify connected customers before it takes effect.

11. Contact

Digital Innovative Agency FZ LLC FOB51716, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, P.O. Box 10055, Ras al-Khaimah, United Arab Emirates Email: support@rqmbooks.com

For privacy questions about Claude itself, contact Anthropic at https://support.claude.com.