Metis privacy notice

Operator and contact

Metis is operated by PKD Solutions Pty Ltd, Australia. ACN 689 362 507 · ABN 96 689 362 507.

Registered address: 4/27 Jacqueline Road, Mount Waverley VIC 3149, Australia.
For support, privacy requests, security reports or contractual notices, contact kedar76@gmail.com. Kedar is the nominated business contact.

Who handles information

PKD Solutions Pty Ltd handles information to operate Metis. For client accounting information, the firm determines its authorised business purpose and instructs Metis under the processing agreement. We also determine the purposes of managing user accounts, service security and support. Direct requests or complaints to the contact above without sending passwords, codes, access tokens or unnecessary financial attachments.

Information collected

We handle account email addresses, password hashes, email verification and password-recovery records, optional authenticator information, necessary session cookies, firm memberships and permissions. For connected companies we handle company and account identifiers, encrypted connection credentials, chart-of-accounts information, supported recorded transactions, limited cached responses, AI suggestions when authorised, staff decisions, operational progress and audit evidence. Support correspondence is used to respond to enquiries.

Sources and use

Information is supplied by users and authorised firm administrators, read from an authorised QuickBooks company, or generated by operating the service. We use it to verify accounts and access, provide the requested accounting workflow, execute staff-approved changes, resolve conflicts or uncertain effects, respond to requests and protect the service. If required information or authorisation is not provided, the affected feature cannot operate. We do not sell QuickBooks information or use it for advertising.

AI and international processing

Application, database and self-hosted mail services run on OVHcloud infrastructure in Canada. Authorised QuickBooks requests go to Intuit. With separate firm AI authorisation, category-suggestion requests go to the configured DeepSeek Open Platform API and contain bounded line identifiers, descriptions, amounts and company account options. Descriptions may contain personal or financial information. Filtering reduces some identifiers but does not guarantee anonymity. Managed login passwords and QuickBooks access/refresh tokens are not included in categorisation payloads. Metis does not train or fine-tune models using these records. We do not promise provider-wide zero retention or no training beyond the applicable provider terms. See the provider register; do not authorise optional AI for information your firm lacks authority to disclose.

Cookies and security

The application uses necessary server-session and enrollment cookies; it does not add advertising trackers. Security controls include HTTPS, password screening and hashing, email verification, platform account approval, backend and database tenant permissions, encrypted provider material and optional authenticator enrollment. No system is guaranteed risk-free. See security and reporting.

Retention and withdrawal

We retain information only for service delivery, necessary audit and security, resolving financial effects, authorised support and applicable obligations. Cache, session, operational history and backup lifecycles differ; there is no single accounting-retention period for all Metis information. When information is no longer required we will delete or de-identify it, subject to lawful retention and technical handling of existing copies. AI authorisation may be withdrawn through an authorised firm administrator or the business contact, which stops new AI processing. Disconnecting stops new connected-company access; neither action undoes completed accounting changes or immediately removes all retained copies.

Access, correction and complaints

Contact the business to request access, correction, deletion or account closure, to ask about retention or provider arrangements, or to complain. We verify identity and authority, consider other people’s rights and explain the outcome or any applicable limitation. We will respond within a reasonable time and applicable legal requirements. You may also contact an applicable privacy regulator, including the Australian Information Commissioner where relevant. Necessary retained records and unresolved financial effects must be handled before making a truthful deletion or closure statement.

Updates

Current notices are linked from the application. Material changes will be communicated through the service or account contact as appropriate. Historical published versions remain available; agreement receipts identify the document bytes accepted.