Your Data is Protected.

Our Commitment to Security

At BillOps, the security and integrity of your data is our highest priority. We have built our platform from the ground up with security in mind — ensuring that your timesheet data, client information, and QuickBooks connection are always protected.

We follow industry best practices and continuously monitor our systems to detect and respond to threats. Your trust is the foundation of everything we do.

Data Encryption

All data transmitted between your device and BillOps is encrypted using TLS 1.3 — the same standard used by banks and major financial institutions. Data stored at rest is encrypted using AES-256 encryption.

This means your time entries, client names, billing amounts, and QuickBooks credentials are never stored or transmitted in plain text.

QuickBooks Integration Security

BillOps connects to your QuickBooks account using OAuth 2.0 — a secure, industry-standard authorization protocol. This means:

• We never see or store your QuickBooks username or password
• You authorize access directly through Intuit's secure login flow
• You can revoke BillOps access from your QuickBooks account at any time
• Our access is scoped to only what is necessary — reading clients/jobs and creating invoices

Access Controls

Your BillOps account is protected by secure authentication. We support multi-factor authentication (MFA) and enforce strict session management — sessions expire automatically after inactivity.

Only you and authorized members of your team can access your account. We never share your data with other BillOps customers.

What We Do NOT Do

• We never sell your data to third parties
• We never use your timesheet or billing data for advertising
• We never access your QuickBooks data outside of the invoice creation workflow
• We never store your QuickBooks login credentials

Data Retention

Your data belongs to you. We retain your timesheet and billing data for as long as your account is active. If you close your account, you may request full deletion of your data at any time by contacting us.

We do not retain backups of deleted account data beyond 30 days.

Incident Response

In the unlikely event of a security incident affecting your data, we are committed to:

• Notifying affected users within 72 hours of discovery
• Providing a clear explanation of what happened and what data was affected
• Taking immediate action to contain the incident and prevent recurrence
• Cooperating fully with any required regulatory notifications

Report a Security Issue

If you discover a potential security vulnerability in BillOps, we encourage responsible disclosure. Please contact us immediately at:

We take all security reports seriously and will respond within 48 hours. We appreciate the security community's help in keeping BillOps safe.