Effective October 6, 2026
Tripwire is a service from Hannah Jane Crafts LLC DBA RuBa Intelligence ("we", "us") that watches a business's QuickBooks Online company for payments that look wrong. This policy explains what we collect, why, who else handles it, how long we keep it, and what you can ask us to do with it. It covers this website and the Tripwire service.
When someone at your business connects Tripwire through Intuit, QuickBooks gives us access to your company's accounting data. From it we copy and store only what we need to check payments:
We don't store bank or credit-card account numbers, your customers, invoices, payroll or employee records, or attachments.
When you sign in with your Intuit account, Intuit tells us your name and email address. We use them to sign you in, to show who reviewed a flag, and to send your alerts.
When you review a flag (for example, marking a payment as fine or as something you're looking into), we record what you chose, any note you add, who did it, and when.
If you email us, we keep the conversation so we have the history if you get in touch again.
Tripwire is free during early access. When paid plans start, card details will go straight to our payment processor and won't reach our servers. We'll keep a record of each payment for billing and taxes.
We use the data above only to provide Tripwire to you: to check your payments for possible problems, explain what we found, alert you, show you your history, give you support, keep the service secure, and meet legal obligations. We don't sell your data or share it for advertising. We don't use your data to train AI models, and we don't let anyone else do so.
Part of Tripwire's checking is done by an AI model, which reviews your transactions alongside the earlier payments to the same vendors and tells us which ones look unusual. The model runs on Amazon Bedrock in our own Amazon Web Services account in the United States. Under Amazon's terms, it doesn't store what we send or use it to train models, and the company that built the model doesn't receive it. We send the model the transaction details listed above, never your sign-in details, email address or connection credentials. AI can be wrong, so every flag is a prompt to take a look, not a finding.
We use a small number of service providers to run Tripwire. They may only use your data to provide their service to us:
We'll also disclose data if the law requires it, for example a valid subpoena or court order. Unless the law prevents us, we'll tell you first. If RuBa Intelligence is ever sold or merged, we'll email you before your data is transferred or becomes subject to a different policy.
Nobody at Tripwire looks at your company's data except to help with a support request you make, to fix a problem that stopped your checks from running, to investigate a security issue, or when the law requires it.
Deleting your data from Tripwire doesn't affect anything in QuickBooks.
All traffic to this site and to QuickBooks is encrypted, and the database is encrypted at rest and isn't reachable from the internet. Access to production systems needs multi-factor authentication. If we learn of a breach that affects your data, we'll tell you promptly and do whatever else the law requires.
Whatever state you're in, you can ask us to:
You can disconnect at any time from Settings in Tripwire, or from the Apps area in QuickBooks. To make a request, email support@ruba-intelligence.com from the address on your account. We'll confirm the request comes from you before acting on it, and we'll respond within 30 days. We won't treat you differently for using these rights.
Your books may name people, such as a sole-proprietor vendor. We handle that information on your business's behalf, only to provide Tripwire to you. If you're one of those people and have a question, please contact the business that pays you. We'll help them answer it.
Tripwire is for businesses in the United States using QuickBooks Online, and all of our data stays in the United States. It's a business service and isn't meant for children.
If we make a material change, we'll email account holders at least 30 days before it takes effect and update the date at the top. Smaller clarifications just update the date.
Questions about this policy or your data: support@ruba-intelligence.com, RuBa Intelligence.
Adapted from the Basecamp open-source policies / CC BY 4.0.