Privacy policy

Apogee Internal Application · effective 6 October 2026

Who we are and what this covers

Apogee Capital Partners, LLC ("Apogee", "we") is a medical-receivables company based in Texas. The Apogee Internal Application (the "Application", at app.apogeecapitalpartners.com) is software Apogee built for its own use: its staff use it to manage Apogee's receivables, cases, bank records and accounting. It is not offered to the public and has no customers other than Apogee itself. This policy describes what the Application collects, how it is kept, and who can see it — including what it reads from QuickBooks Online.

What the Application reads from QuickBooks Online

With the authorization of an Apogee company administrator, the Application connects to Apogee's own QuickBooks Online company files through Intuit's API, with read-only access to accounting data. It reads the chart of accounts and the transactions posted to Apogee's bank-type accounts — the date, transaction type, number, payee or customer name, memo, the account the other side was posted to, the amount and the running balance — together with each account's balance. It does not write to QuickBooks, does not read payroll or payments data, and does not access any QuickBooks company other than Apogee's own. The connection can be revoked at any time by an administrator in the Application or under Apps in QuickBooks Online.

What else the Application holds

The Application holds Apogee's business records: its purchased medical receivables and the payments on them, its case notes and correspondence with law firms and providers, its bank-account registers, its investor ledger and its financial statements. Some of these records identify patients whose medical receivables Apogee has purchased. That information is handled under HIPAA and Apogee's business-associate agreements, is visible only to Apogee staff who need it for their work, and is never sent to Intuit or QuickBooks through this connection.

Where data is kept and who can see it

• Everything the Application stores — including what it reads from QuickBooks — lives in Apogee's own database on Google Cloud, in the United States, under Apogee's Google Cloud account.
• Access to the Application requires a Google Workspace sign-in on Apogee's own domain through Google's Identity-Aware Proxy; the people who can sign in are Apogee's staff and the contractors Apogee engages for its accounting, each under a confidentiality obligation.
• The credentials used to connect to QuickBooks, and the access tokens Intuit issues, are stored encrypted.
• Every change made in the Application is recorded in an audit log that names who made it and when.
• Service providers that process data on Apogee's behalf are limited to those that host the Application and its connections: Google Cloud (hosting, storage and backups) and Intuit (the QuickBooks connection itself). Apogee does not sell data, share it for advertising, or use it for any purpose other than running its own business.

How long we keep it

Records are kept for as long as Apogee needs them to meet its accounting, tax, legal and contractual obligations, and are backed up on Google Cloud. Disconnecting the QuickBooks connection stops any further reading; what was already read remains part of Apogee's own accounting records.

Security

Data is encrypted in transit and at rest. Access follows the least-privilege principle, is tied to individual accounts and is logged. Credentials are stored encrypted and rotated when needed. Backups are kept within Google Cloud.

Changes to this policy

If this policy changes, the new version is posted at this address with a new effective date.

Contact

Questions about this policy or about the Application's use of QuickBooks data go to Apogee Capital Partners, LLC through the contact details at www.apogeecapitalpartners.com.