Privacy Policy

Last updated September 9, 2026

Who we are

Fishbowl is operated by Mark and Bruce Management, LLC (“we”, “us”), which provides management services to five affiliated companies under common family ownership. Those companies trade together as Pets Plus Natural and operate five independent pet supply stores in Pennsylvania and New Jersey. Our address is 423 S Broad St, Lansdale, PA 19446. Fishbowl is the group’s internal operations and reporting platform, hosted at fishbowl.petsplusnatural.com.

What this policy covers

This policy describes how Fishbowl handles data it accesses from services we connect to it, including QuickBooks Online, and data it holds about the employees who use it. Fishbowl is used only by authorized Pets Plus Natural personnel.

QuickBooks Online data

Each of the five store companies keeps its own QuickBooks Online company file. We access them as their management company, with authorization given by an administrator of each file. From every connected file Fishbowl reads the following, and nothing else:

• Chart of accounts— the account list for the company file, including balance-sheet accounts. We store each account’s name, number, type and classification. We do not store account balances, and we do not read transactions, statements or any connected bank feed.
• Classes and locations — the dimensions our books are organized by, so financial results can be attributed to the correct store.
• Profit and loss reports — monthly revenue, cost of goods sold, operating expense and other income and expense totals, by account and by store.
• Company name and legal name — read once when the connection is made, to confirm the correct company file was authorized.

We also store the identifier of each connected company file and the expiry dates of our access credentials, so we can tell when a connection needs renewing. Data from each company file is stored against that file’s identifier and is never merged across companies except in reporting we produce for the group’s own owners.

Fishbowl never writes to QuickBooks. QuickBooks does not offer a read-only permission — the single scope we request, com.intuit.quickbooks.accounting, technically permits writes — so the restriction is enforced in our own code. The integration issues only read requests against the Accounting API, and contains no code path that creates, modifies or deletes anything in the company file. QuickBooks remains the system of record; Fishbowl holds a copy of the summary figures for reporting.

Beyond the summary totals above, we do not read customer records, vendor records, invoices, bills, payments, payroll detail, or any banking or payment-instrument information. We see the payroll expense total on the profit and loss report; we never see individual compensation, hours or employee records.

The integration runs once nightly and re-reads the last 24 complete calendar months on each run, so that figures corrected in QuickBooks after the fact are corrected here too.

Why we access it

For a single purpose: to understand the profitability of each of our stores. Our point-of-sale system knows what each store sold and what the merchandise cost, but not what it costs to operate the location — rent, utilities, insurance, card processing fees, payroll. Bringing those figures together lets us make sound decisions about staffing, inventory and whether to renew a lease. We do not use this data for advertising, profiling, or any purpose unrelated to running our own business.

Whether this data identifies anyone

What we read from QuickBooks is financial summary information about our own business. It is not consumer data and contains no consumer identifiers. Where an account, class or location name in our own books refers to an owner or officer — as account names in a family-owned business sometimes do — that name is stored as it appears in the books and is treated as confidential business information, under the same access controls as everything else described here.

Other data in Fishbowl

Fishbowl also holds our own retail operating data, including product and inventory records, sales transactions, vendor purchasing records, and customer records from our point-of-sale, e-commerce and loyalty systems. Retail customer information is used to operate our loyalty program and to send marketing communications to people who have opted in. It is never combined with, or exposed through, the QuickBooks integration.

For employees who use Fishbowl, we hold an account record — name, work email address and assigned role — and logs of activity within the application, which we use to operate the system, support users and maintain security.

How we protect it

• Access to QuickBooks data in Fishbowl requires an individual authenticated account. Sensitive areas are further restricted by role, and the QuickBooks connection can only be established or removed by an administrator.
• All traffic is encrypted in transit using TLS.
• OAuth access and refresh tokens are encrypted at rest with AES-256-GCM, and are stored only in that encrypted database record. They are never written to logs or to source control.
• Data is stored in a private PostgreSQL database on a server we control, located in the United States. The database does not accept connections from the public internet.

Sharing and disclosure

We do not sell, rent or trade this data, and we do not share it with advertising networks, data brokers or analytics providers. It is accessible to authorized Pets Plus Natural personnel; to our accountant and professional advisors in the ordinary course of business; and to our hosting provider, only insofar as it stores data on our behalf under contract. We may disclose information where required by law.

Retention and deletion

Financial summary data is retained for seven years, consistent with the record-retention period that applies to our accounting records, and is then deleted. Disconnecting the QuickBooks integration immediately and permanently deletes the stored access and refresh tokens, ending all access to the company file. Previously synced financial summary data can be deleted on request to the address below; we will act on such a request within 30 days.

Disconnecting

The connection can be revoked at any time, from either side: from within QuickBooks Online under your connected-apps settings, or from within Fishbowl by an administrator. Revoking from either side ends Fishbowl’s access immediately.

Security incidents

If we become aware of a security incident affecting data covered by this policy, we will investigate promptly, take steps to contain it, and notify affected parties and any connected service provider without undue delay, as required by applicable law.

Changes to this policy

If we change how Fishbowl handles connected data, we will update this page and revise the date at the top.

Contact

Questions about this policy can be sent to contactus@petsplusnatural.com, or by post to Mark and Bruce Management, LLC, 423 S Broad St, Lansdale, PA 19446.