Legal

Privacy Policy

Last updated: June 24, 2026

This Privacy Policy explains how Weaf Company Uganda Limited ("Weaf", "we", "us") collects, uses, and protects information when you use QBO Connector — our service that connects QuickBooks Online to national tax-fiscalization systems (URA EFRIS in Uganda, ZRA Smart Invoice in Zambia, and MRA EIS in Malawi). By using the service you agree to the practices described here.

1 Information we collect

We collect information needed to operate the integration and support your account:

  • Account information — your name, email address, phone number, company name, and tax identification number (TIN).
  • Connection credentials — OAuth tokens for QuickBooks Online and the API keys / device or terminal identifiers issued by the relevant tax authority.
  • Transactional data — invoices, receipts, credit notes, products, customers, suppliers, and stock records synchronized between QuickBooks and the tax authority.
  • Usage and technical data — log entries, IP address, browser type, and timestamps generated when you use the service.

2 How we use information

We use the information to:

  • Fiscalize your documents with the relevant tax authority and keep QuickBooks and the authority in sync.
  • Authenticate you, manage your subscription, and provide customer support.
  • Diagnose errors, monitor reliability, and improve the service.
  • Send service-related notices (for example, fiscalization failures or renewal reminders).

3 How we share information

We do not sell your personal information. We share data only:

  • With the tax authority (URA, ZRA, or MRA) as required to fiscalize your documents.
  • With Intuit / QuickBooks Online to read and write the records you authorize.
  • With service providers (such as hosting and email delivery) acting on our behalf under confidentiality obligations.
  • Where required by law, regulation, or valid legal process.

4 QuickBooks & tax-authority data

When you connect QuickBooks Online, you authorize QBO Connector to access only the data needed to perform fiscalization (such as invoices, items, and customers). We use this data solely to deliver the service and never repurpose it for advertising. You can revoke access at any time from your Intuit account or by disconnecting the integration, after which we stop syncing new data.

5 Data security

We protect data in transit using TLS/SSL encryption and restrict access to credentials and transactional records to authorized personnel and processes. While no system can be guaranteed completely secure, we apply industry-standard safeguards and review them regularly.

6 Data retention

We retain your data for as long as your account is active and for any additional period required to comply with tax, accounting, and legal obligations. When data is no longer required, we delete or anonymize it.

7 Your rights

Subject to applicable law, you may request to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your account and associated personal data, subject to legal retention requirements.
  • Withdraw a connection authorization at any time.

To exercise any of these rights, contact us using the details below.

8 Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the service after changes take effect constitutes acceptance of the revised policy.

Contact us

Questions about this Privacy Policy or your data? Email support@weafcompany.com or visit our contact page. Weaf Company Uganda Limited.

This document is provided for general information and does not constitute legal advice. Please have it reviewed by qualified counsel before relying on it.