Privacy Policy
Who we are
Demeter AI Operations & Consulting LLC (“Demeter”, “we”, “us”) is a Texas limited liability company based in Frisco, Texas. We build and run operations automation for small and midsize businesses. This policy explains what information we collect through demeter-ops-ai.com, through the integrations we run for our clients (including our QuickBooks Online integration), and through the tools we use for our own marketing, and what we do with it.
If a client’s signed agreement with us sets stricter terms for that client’s data, the signed agreement controls.
What we collect on this site and why
When you contact us. If you fill in a form on this site (built with WPForms) or email us, we receive your name, email address, company, and whatever you write. We use it to reply and, if we work together, to run the engagement.
When you join our email list. If you sign up through a form or popup (OptinMonster), we receive your email address and any name you give. Our list is managed in Hostinger Reach. We use it to send our Field Notes and occasional updates. Every email has an unsubscribe link.
When you browse the site. We use Google Analytics, connected through the MonsterInsights and Site Kit by Google plugins. It sets cookies and records the pages you visit, how you arrived, your device and browser type, and your approximate location. We use these reports to learn which pages are useful. Google’s handling of this data is described at https://policies.google.com/privacy, and you can opt out with Google’s browser add-on at https://tools.google.com/dlpage/gaoptout.
Spam protection. Form submissions and comments may be checked by Akismet, a service of Automattic. Akismet receives the submitted content, your IP address and your browser user agent to decide whether the submission is spam.
Hosting and security logs. Our hosting provider, Hostinger, and our caching software, LiteSpeed, record IP addresses and request details in server logs. These logs keep the site secure and fast.
Booking a call. If you book a call through a scheduling link we share, the scheduling service collects your name, email address and chosen time and passes them to us so we can meet.
Our QuickBooks Online integration
Demeter connects to QuickBooks Online only for businesses that hire us, and only after an administrator of that business authorizes the connection through Intuit’s sign-in and consent screen. We act on that business’s instructions.
What we access. Depending on the work the client asks for, the integration reads and writes the accounting records in that client’s QuickBooks company: company information, chart of accounts, customers, vendors, products and services, estimates, invoices, bills, payments, purchases, classes, attachments and financial reports. These records can include the names, addresses, email addresses and phone numbers of the client’s customers, vendors and employees. We do not receive bank login credentials or full payment card numbers.
Why we use it. Only to do the work the client hired us for, such as entering vendor bills, matching records between QuickBooks and the client’s other business systems, and producing financial and operational reports for the client. We do not use QuickBooks data for our own marketing, we do not combine one client’s data with another client’s, and we do not sell it.
Where it goes. QuickBooks data moves only between the client’s QuickBooks company, systems Demeter controls, and other business systems the client tells us to connect, such as JobTread, JobNimbus or Microsoft 365. We also use the service providers listed under “How we share information,” under terms that limit their use of the data to providing their service to us.
AI processing. Some of our automations use AI models to read documents and classify records, for example reading a vendor invoice so it can be entered as a bill. For this we use Anthropic (Claude) and TypeSafe. We use these services under settings that do not allow them to train their models on our clients’ data, and we do not use client data to train any AI model ourselves.
Storage and security. QuickBooks data and access tokens are stored on systems Demeter controls in the United States: a dedicated virtual server hosted by Hostinger and Demeter’s own workstations. OAuth tokens are kept in restricted storage, are never placed in code repositories or shared documents, and are issued, refreshed and revoked through Intuit’s OAuth service. All connections to Intuit use encrypted HTTPS. Access is limited to Demeter personnel working on that client’s engagement.
Retention and deletion. We keep QuickBooks data only as long as the engagement needs it. When an engagement ends, or when the client disconnects our app or asks us to, we revoke our tokens and delete that client’s QuickBooks data from our systems within 30 days, except for records the law requires us to keep, such as the invoices we issued to that client.
Disconnecting. A QuickBooks administrator can disconnect Demeter at any time from the Apps area of QuickBooks Online, or by writing to us. Intuit’s own handling of QuickBooks data is described in the Intuit Global Privacy Statement at https://www.intuit.com/privacy/statement/.
Our LinkedIn integration
We use LinkedIn’s APIs only for our own LinkedIn presence:
- to publish posts that Dimitrios Tselios has written and approved to his own LinkedIn profile, and
- to read the performance of those posts: counts of impressions, members reached, reactions, comments, reshares, saves, sends, link clicks, followers gained and profile views.
The LinkedIn data we access is limited to our own account: the profile name and member identifier of the account we authorize, the identifiers of our own posts, and aggregate counts for those posts. We do not collect, store or use the personal data of other LinkedIn members, we do not build profiles of anyone, and we do not sell, rent or share LinkedIn data with anyone.
LinkedIn data is stored only on systems Demeter controls. Access tokens are kept in restricted local storage, are never placed in shared code repositories, and expire after 60 days. We keep post performance history for up to 24 months to track how our content performs over time, then delete it. If we stop using LinkedIn’s APIs, or if access is revoked, we delete the LinkedIn data we hold within 30 days.
The authorizing member can revoke our access at any time in LinkedIn under Settings, Data privacy, Permitted services.
How long we keep information
We keep inquiry and client correspondence for as long as needed for the conversation, any engagement that follows, and our business and tax records. We keep email list entries until you unsubscribe. Analytics data is kept under the retention setting of our Google Analytics property. QuickBooks and LinkedIn data follow the retention rules in their sections above.
Your choices
You can ask us to show you, correct, export or delete the information we hold about you or your business, or to stop emailing you, by writing to dimitris@demeter-ops-ai.com. Depending on where you live, you may have additional rights under your state’s privacy law, and we will honor requests made under those laws.
Security
We use reasonable technical and organizational measures to protect information, including restricted access to credentials and encrypted connections to this site and to the services we integrate with. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a breach that affects your information, we will notify you as the law requires.
Children
This site and our services are meant for businesses and are not directed to children under 13. We do not knowingly collect their information.
Changes to this policy
When we change this policy we will update the effective date above. Material changes will be noted on this page.
Contact
Demeter AI Operations & Consulting LLC
Frisco, Texas
dimitris@demeter-ops-ai.com