Privacy Policy

Last updated September 9, 2026. Kueola is a product operated by Home Based Daddy LLC.

Information Kueola handles

Kueola stores account identity information, owner-confirmed working-hours and scheduling preferences, encrypted provider credentials, candidate episodes, minimal evidence summaries, snoozes, dismissal outcomes and reasons, scheduling decisions, returned IDs for Kueola-created events, and privacy-safe aggregate product metrics.

From QuickBooks, Kueola accesses the customer, invoice, item, and company context needed to evaluate repeat-service history. From Google Calendar, Kueola accesses the calendar list and event details on owned calendars needed to match historical visits, calculate calendar-open gaps inside owner-set working hours, review authoritative canceled-event state, check for later matching visits, and create an owner-approved event on an owned calendar. Kueola preserves the last known normalized event evidence needed to understand a later cancellation, but does not persist unnecessary raw QuickBooks or Calendar responses.

How information is used

Information is used to authenticate users, operate each workspace, connect providers, identify evidence-backed repeat-service patterns, infer typical visit duration when enough reliable history exists, review cancellations that may lack a replacement, calculate calendar-open gaps, explain recommendations, honor snoozes and dismissals, create an event only after explicit owner approval, prevent duplicate writes, maintain security, and measure product usefulness in aggregate.

Data Protection and Security

Kueola uses HTTPS/TLS to protect data in transit. Google and Intuit OAuth access and refresh tokens, along with other sensitive provider credentials, are stored server-side and encrypted at rest using AES-256-GCM. Encryption keys and provider client secrets are kept in production server environment configuration and are not exposed to browser or client code. Kueola passwords are protected with one-way scrypt password hashing and are not stored in plaintext.

Authenticated workspace isolation and access controls prevent one workspace from accessing another workspace's connected-provider data. Kueola uses session protections, CSRF protection, OAuth state validation, origin validation, and rate limiting where applicable. Sensitive Google Calendar, QuickBooks, OAuth-token, and customer data is not placed into normal advertising or analytics payloads. Operational logs are designed to avoid or redact sensitive provider credentials and customer content.

Kueola stores only the data needed to provide its scheduling-inbox functionality and supports provider disconnection and account-data deletion. Google Calendar and QuickBooks data is used only to provide Kueola's user-facing functionality; it is not sold or used to train advertising or generative-AI models. No security measure can guarantee absolute security, but Kueola maintains safeguards designed to protect the confidentiality and integrity of the data it handles.

Tokens and service providers

OAuth tokens are encrypted at rest and used only to perform Kueola's approved provider operations. Kueola relies on hosting, managed database, email/support, Google, and Intuit services required to operate the product. These providers process data under their own terms and applicable agreements.

Sharing and tracking

Kueola does not sell customer data. Kueola does not use Google Ads, Meta Pixel, advertising cookies, remarketing, external behavioral analytics, or customer-session replay.

Retention and deletion

Active account and provider records are kept while needed to operate the workspace. OAuth transaction records expire after ten minutes. Sessions expire after seven days or on logout. Candidate evidence and decisions are retained for up to 24 months; privacy-safe aggregate metrics for up to 24 months; Kueola-created event references for up to 13 months after the event; operational security logs for 30 days. Completed deletion receipts contain no provider or customer content and are removed after 30 days. Users may request deletion as described on the data-deletion page.

Contact

Privacy requests: privacy@kueola.com. Product support: support@kueola.com.