Byway Lab

Last updated: Jul22 2026

What this application is
Byway Lab Hub (“the Hub”) is a private, internal administration tool operated by Byway Lab. It is used by a single person — the business owner — to view and analyze Byway Lab’s own business and financial records. The Hub has no other users, no customers, and no public sign-up.

What data the Hub accesses
With the owner’s explicit authorization, the Hub connects to QuickBooks Online company files that the owner administers, and reads accounting data through Intuit’s QuickBooks Online Accounting API: accounts, transactions, invoices, bills, vendors, customers, and standard financial reports.

The Hub reads this data. It does not write to, modify, or delete records in QuickBooks Online.

The Hub accesses only company files the owner personally administers. It does not access any third party’s QuickBooks data.

How the data is used
Solely to produce financial reporting and analysis for the owner’s own use.

The Hub does not:

sell, rent, license, or otherwise share data with any third party
use the data for advertising, marketing, profiling, or model training
transmit the data to any analytics, tracking, or telemetry service
make the data available to anyone other than the single authorized operator
Where the data is stored
In a managed PostgreSQL database hosted on Google Cloud Platform in Montréal, Canada. Data is not replicated outside Canada.

How the data is protected
The application has no public IP address and no inbound route from the public internet. Access is restricted to the owner’s own devices over a private encrypted network (WireGuard).
Access requires a password and a time-based one-time-password (TOTP) second factor.
Data at rest is encrypted with AES-256 by the hosting platform.
OAuth access and refresh tokens are additionally encrypted at the application layer with AES-256-GCM before storage; the encryption key is held in Google Secret Manager and is never stored alongside the data or in source control.
All external network traffic uses TLS 1.2 or higher.
Backups are encrypted before leaving the primary system and stored in a separate region within Canada, with a 90-day retention period.
Retention and deletion
Synced accounting data is retained for as long as the Hub is in use, so that historical reporting remains available. Disconnecting a QuickBooks Online company file immediately deletes the stored OAuth tokens for that file. To request deletion of previously synced data, contact create@bywaylab.com.

Third parties
The Hub’s only sub-processor is Google Cloud Platform, which provides the compute, database, storage, and secret-management infrastructure. No data is shared with any other party.

Changes
Material changes to this policy will be posted on this page with an updated date.

Contact
Byway Lab — create@bywaylab.com — 604.203.7600