Terms & Conditions

Welcome to QNLAA! QNLAA (the "Service") is a QuickBooks Natural Language AR Agent provided by Amagi Solutions Group, Inc., a Georgia corporation with offices at 3465 Lawrenceville Suwanee Rd, Suite A, Suwanee, GA 30024 ("Amagi," "we," "us," or "our"). You can reach us anytime at hello@amagisolutionsgroup.com.

These Terms of Service (the "Terms") govern your access to and use of the Service. By creating an account, signing a QNLAA service agreement, or using the Service, you ("Customer," "you") agree to these Terms.

1. What the Service Is (and Is Not)

QNLAA is a software-as-a-service accounts receivable (AR) assistant for QuickBooks Online ("QBO"). It connects to your QBO company via Intuit's OAuth authorization flow and works through a two-way SMS interface. Through QNLAA, your authorized users can look up balances/invoices/AR aging, draft and send invoices, and receive SMS confirmations.

Confirmation before execution. Any money-moving or customer-facing action requires the requesting authorized user to reply "YES" to a confirmation text before execution. Nothing executes automatically. Read-only requests do not require confirmation. Action-confirmation replies are authorizations. When you or your authorized user replies "YES" or otherwise affirmatively confirms an action described in a QNLAA text message, that reply is treated as your instruction to Amagi to take the described action, logged as such, and relied upon by Amagi as your authorization. QNLAA's SMS agent is only authorized to represent and execute the specific action summarized in the confirmation text immediately preceding your reply — it has no authority to take any broader or different action based on your reply.

QNLAA is an assistant tool only. It does not provide accounting, tax, bookkeeping, or legal advice. You remain solely responsible for your own books, records, and business decisions.

QNLAA is not a financial institution. QNLAA does not make loans, extend credit, provide investment or insurance advice, or itself hold, transmit, or take custody of funds. It is a data-access and natural-language interface layer that lets you interact with data already in your own pre-existing QuickBooks Online account. Payment collection is handled by Intuit/QuickBooks Payments and, for your QNLAA subscription fees, by Stripe — not by Amagi. See Section 15.

2. Plans

At launch, single tier: QNLAA Essentials — one QBO company per subscription, SMS balance lookups/AR aging, SMS invoice creation/sending with confirm-before-send, defined authorized users with configurable permissions. Future tiers may be added; marketing mentions are not a commitment. Features within a tier may change over time per Section 14, with reasonable notice for material reductions.

3. Your Account and Authorized Users

You are responsible for designating authorized users, maintaining accurate contact info, and ensuring each is permitted to access your data and receive SMS.

Coming soon — web dashboard. Amagi plans a client-facing web dashboard (billing management, adding/removing authorized users, usage statistics, invoice/statement history). Once live, it will require login and session cookies, and this section and the Cookie Policy will be updated. No such dashboard exists yet — all interaction today is via SMS.

4. QuickBooks Online Connection and Data Handling

Connection. OAuth 2.0; QNLAA never sees your QBO password. Storage. Tokens encrypted at rest, never plaintext; refresh tokens rotate on use. Reads AR-relevant data only; writes only confirmed-action records. Does NOT access payroll, bank feed/reconciliation, bill pay, vendor records, or tax data unless separately agreed in writing. Stores SMS content and authorized-user contact info for operation and audit trail.

Retention. We retain QBO-derived account data, SMS records, and account information for as long as you maintain an active subscription, plus thirty (30) days afterward for backup integrity, dispute resolution, and recordkeeping. After that window, except where legally required to retain, we delete or de-identify the data. This 30-day figure matches the QNLAA Privacy Policy.

Separately, transient technical data generated while interpreting a single SMS request (intermediate AI-processing artifacts not part of your permanent account/invoice/message-history records) is retained no more than seven (7) days, mirroring our AI model provider's standard API retention window absent a Zero Data Retention agreement (see Section 9 and Privacy Policy Section 6(d)). This 7-day figure applies only to that narrow transient category, not to account records, which follow the 30-day standard.

Disconnection. Revoke via QBO Connected Apps or by request; revocation immediately ends read/write access. On cancellation/termination we cease QBO API activity and delete/de-identify data per the retention schedule above.

5. SMS Communications and Consent

Two-way SMS from a dedicated QNLAA number; transactional, tied to your own AR activity — not marketing, not sent to your customers or non-consenting third parties.

Opt-in. Users opt in by signing a QNLAA service agreement during onboarding, with explicit written consent to receive SMS about their QBO AR activity (invoice drafts, payment confirmations, status updates). Consent collected once per tenant; additional authorized users added by the account owner, who confirms their consent as part of the same agreement. Self-serve signups additionally verify the owner's phone via OTP. Additional users get an invitation text and must reply YES to activate; non-confirming users are never messaged again. Consent to receive SMS messages is not a condition of purchasing or using the Service, except to the extent SMS is the exclusive channel through which the Service operates; where an alternative non-SMS arrangement is feasible, we will work with you on it upon request.

No automated random/sequential dialing. QNLAA sends messages only to specific phone numbers you or your authorized users have affirmatively provided and verified — never to numbers generated randomly or sequentially, and never using prerecorded voice messages.

Frequency/rates/opt-out. Frequency varies with activity; msg/data rates may apply. Reply STOP anytime to opt out. Consistent with evolving FCC guidance, we will also honor a clearly stated opt-out request made through any other reasonable method — for example, a text reply saying "unsubscribe," "cancel," or "remove me," or a request sent to hello@amagisolutionsgroup.com — not only the STOP keyword, even ahead of when any specific method-neutral revocation rule becomes independently mandatory. Reply START to resume; HELP for help. Carriers not liable for delivery issues. Opting out of SMS does not cancel the underlying subscription.

Record-keeping. We maintain records of each authorized user's consent (including the date, method, and phone number) and of opt-out/suppression requests for at least five (5) years, consistent with general TCPA-litigation record-retention practice.

State-specific SMS consent requirements. If you or your authorized users are located in Florida, Oklahoma, or Washington State, additional state-specific SMS consent laws may apply to messages you receive (Florida's Telephone Solicitation Act, Oklahoma's Telephone Solicitation Act, and Washington's Commercial Electronic Text Message Act, respectively). We intend for our consent, opt-out, and record-keeping practices described above to satisfy these states' requirements, including Oklahoma's specific requirement that consent not be a condition of purchase and its calling/texting-hours limitations; we will not send AR-related SMS outside 8:00 a.m.–8:00 p.m. in the recipient's local time zone.

6. Payment, Subscriptions, and Billing

Fees/processor. Billed via Stripe on a recurring monthly or annual basis, through Stripe's own hosted Checkout page — Amagi never receives or stores your card number; card details stay within Stripe's PCI-compliant infrastructure.

Auto-renewal disclosure. Your subscription automatically renews at each billing period's end — monthly for Essentials today, or annually if you later select an annual plan — at the then-current price, unless cancelled first. Before collecting payment information we will clearly and conspicuously disclose: (a) that the subscription auto-renews; (b) the renewal term length; (c) the price charged at each renewal; and (d) how to cancel. For annual plans we will also send a reminder notice before each renewal. You may cancel through the same medium used to sign up (self-serve web flow / Stripe Customer Portal) without calling or mailing anything. Advance notice of price changes will be given before they take effect.

State-specific auto-renewal requirements. A state-by-state survey found that most state auto-renewal statutes (California, Illinois, Oregon, Delaware, and others) apply only to individual consumers purchasing for personal or household purposes, and do not reach QNLAA's business customers. Two states currently break from that pattern:

• Colorado (Colo. Rev. Stat. § 6-1-732, as amended by SB25-145, effective February 16, 2026) now defines the protected party broadly enough to include businesses, not just individuals. If you are a Colorado-based Customer, we additionally commit to: cancellation that is at least as easy as sign-up, available through the same online channel you used to subscribe, with no requirement to call or speak to a live representative.
• Virginia (Va. Code §§ 59.1-207.45 to -207.49, as amended by 2026 legislation) now extends coverage to "any small business" acquiring services for business purposes. If you are a Virginia-based small-business Customer, the same cancellation-symmetry commitment above applies to you as well.

If you are located in a different state and believe a state-specific auto-renewal law applies to your business, contact us at hello@amagisolutionsgroup.com and we will work with you on it.

Failed payments — phased response:

• Days 1–7 (grace period): Full access continues while Stripe retries payment; billing-update reminders sent.
• Days 8–14 (degraded access): The SMS agent declines AR data/action requests and prompts for a billing update instead. Data is preserved; access restores immediately on successful payment.
• Day 15+: Access suspended (Section 10) if unresolved; data continues to follow the Section 4 retention schedule rather than being immediately deleted.

Cancellation and refunds:

• Monthly plans (Essentials, at launch): Cancel anytime; access continues through the already-paid period; no partial-period refunds — matching common SaaS practice for monthly billing.
• Annual plans (when offered): Full refund if cancelled within 14 days of the initial purchase or a renewal charge. After 14 days, no prorated refund, but access continues through the paid annual term.
• How to cancel: Self-serve via Stripe Customer Portal, or by contacting hello@amagisolutionsgroup.com.
• Cancellation does not itself delete stored data — see Section 4.

7. Acceptable Use

You agree not to, and not to permit authorized users to: use the Service unlawfully (including unsolicited/deceptive messages); access another tenant's data; interfere with/disrupt/reverse-engineer/probe the Service; transmit malware/infringing content; or resell/provide the Service to third parties without Amagi's written consent.

8. Customer Data, Ownership, and Confidentiality

You own your accounting data, customer records, and message content ("Customer Data"). You grant Amagi a limited license to access/process/store it solely to provide the Service. Amagi owns the Service and related IP. Amagi will not disclose Customer Data to third parties except (a) as required to provide the Service — Intuit/QBO, Twilio, Amagi's hosting/database provider, Stripe, and Anthropic (AI model provider) — or (b) as required by law.

9. Third-Party Services

The Service depends on Intuit QBO, Twilio, Stripe, Supabase, and Anthropic. Amagi's use of Anthropic's API follows Anthropic's standard commercial API terms: Anthropic does not use API inputs/outputs to train its models, and — absent a separate Zero Data Retention agreement — automatically deletes API inputs/outputs after seven (7) days. Your QBO use remains subject to Intuit's own terms. Amagi is not responsible for outages/changes/data-handling failures of third-party platforms outside its reasonable control.

10. Suspension and Termination

By you: cancel anytime; revoke QBO access anytime (Section 4); stop SMS anytime via STOP or any other reasonable method (Section 5).

By Amagi: may suspend/terminate, with notice where practicable, for material breach, non-payment following Section 6's grace/degraded-access period, misuse, or as required by law or a dependent third-party platform.

Effect: ceases QBO API activity, stops SMS (except a final termination confirmation), deletes/de-identifies data per Section 4's retention schedule except where legally required to retain. Data breach notification, warranty, liability, confidentiality, dispute resolution, and general/misc terms survive termination.

11. Data Breach Notification

If Amagi discovers a security incident resulting in unauthorized access to your Customer Data, we will investigate promptly and notify you within thirty (30) days of confirming the breach, describing what happened, what data was involved, and our response. A 50-state survey conducted as part of drafting this section found that 30 days matches or beats every state's own statutory deadline currently in effect (the shortest state deadlines found nationally are also 30 days — Colorado, Florida, Washington, Maine, New Jersey, and recently-amended California and New York), meaning our voluntary 30-day commitment does not fall short of any state's legal requirement as of this drafting. Where applicable law requires a different timeline, method, or content in a jurisdiction we later expand into, we will also comply with that law.

12. WARRANTY DISCLAIMERS

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. AMAGI DOES NOT WARRANT THE SERVICE WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT SMS WILL BE DELIVERED TIMELY, AS DELIVERY DEPENDS ON WIRELESS CARRIERS OUTSIDE AMAGI'S CONTROL.

THE SERVICE IS A TOOL, NOT A SUBSTITUTE FOR PROFESSIONAL JUDGMENT. AMAGI DOES NOT PROVIDE ACCOUNTING, BOOKKEEPING, TAX, OR LEGAL ADVICE. CUSTOMER IS SOLELY RESPONSIBLE FOR THE ACCURACY OF ITS OWN BOOKS AND RECORDS AND FOR INDEPENDENTLY VERIFYING AR INFORMATION BEFORE RELYING ON IT.

13. LIMITATION OF LIABILITY

NO MONEY-MOVING OR CUSTOMER-FACING ACTION IS TAKEN WITHOUT THE REQUESTING USER'S EXPLICIT AFFIRMATIVE CONFIRMATION — A DELIBERATE DESIGN FEATURE PLACING THE FINAL DECISION WITH THE CUSTOMER. AMAGI IS NOT RESPONSIBLE FOR THE CONSEQUENCES OF ANY AFFIRMATIVELY CONFIRMED ACTION, INCLUDING A CONFIRMATION SENT IN ERROR, NOR FOR THE ACTIONS OF ANY USER THE CUSTOMER ITSELF AUTHORIZED.

Cap. AMAGI'S AGGREGATE LIABILITY IS CAPPED AT THE FEES PAID BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM (OR ZERO FOR A FREE PILOT CUSTOMER). This figure reflects the researched SaaS market-standard baseline (a cap of 1x trailing-12-months fees is found in roughly 85% of surveyed SaaS contracts), replacing an earlier, more restrictive 3-month figure carried over from an early pilot-stage draft.

IN NO EVENT WILL AMAGI BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR LOST PROFITS, LOST DATA, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY.

14. Changes to These Terms

We may update these Terms; revised Terms post with an updated "Last updated" date. Material changes affecting active paying customers get reasonable advance notice (e.g., email/SMS) before taking effect. Continued use after a change constitutes acceptance.

15. Regulatory Scope: Not a Financial Institution; GLBA-Covered Customers

QNLAA is a data-access and natural-language interface tool — it lets you connect to and interact with data already in your own pre-existing QuickBooks Online account more quickly and naturally than using QBO's own interface directly. QNLAA does not extend credit, make loans, underwrite risk, or provide investment/insurance advice, and does not itself hold, transmit, or take custody of client or customer funds — actual payment collection happens through Intuit/QuickBooks Payments and Stripe, not through Amagi. On this basis, Amagi does not believe QNLAA independently triggers the Gramm-Leach-Bliley Act's (GLBA) financial-institution obligations, including the FTC Safeguards Rule (16 C.F.R. Part 314).

GLBA-covered Customers. If you are, or become, a "financial institution" as defined under GLBA and its implementing regulations (for example, a lender, mortgage broker, finance company, or collection agency), you agree to notify us in writing before or promptly after such status arises, so that we can discuss appropriate contractual terms. If you notify us of such status, we agree to: (a) work with you in good faith to execute a mutually acceptable data protection addendum addressing the security and confidentiality of nonpublic personal information accessed through the Service; (b) maintain administrative, technical, and physical safeguards for data accessed through your QuickBooks Online connection that are reasonable and appropriate in light of the nature of the Service; (c) notify you without unreasonable delay upon confirming a security incident materially affecting your data in our possession; and (d) reasonably cooperate with your own compliance obligations, including providing available information about our security practices upon reasonable request. We do not represent or warrant that we hold any particular security certification (such as SOC 2) unless expressly stated in a separate written agreement between us. Nothing in this Section creates obligations broader than those we expressly agree to in a signed addendum with a GLBA-covered Customer. [FLAGGED — this clause is a drafting suggestion produced through research, not attorney-vetted language; it should be reviewed by counsel before relying on it, and Ricardo should separately consider, as a business decision, whether to instead exclude GLBA-covered financial institutions from the Service altogether absent a signed addendum, which would trade some potential revenue for materially less compliance surface.]

16. GOVERNING LAW AND DISPUTE RESOLUTION

THESE TERMS ARE GOVERNED BY THE LAWS OF THE STATE OF GEORGIA, WITHOUT REGARD TO ITS CONFLICT-OF-LAWS PRINCIPLES. ANY DISPUTE SHALL BE BROUGHT IN THE STATE OR FEDERAL COURTS LOCATED IN GWINNETT COUNTY, GEORGIA, AND THE PARTIES CONSENT TO THAT JURISDICTION.

Amagi has deliberately chosen not to include a mandatory arbitration clause, class-action waiver, or jury-trial waiver. QNLAA's customers are businesses, not consumers, reducing the class-action exposure arbitration clauses usually manage, and arbitration's cost-shifting rules can disadvantage a small-business defendant as easily as a claimant. This mirrors Alpaca (a brokerage API platform), which also uses straight court litigation with no arbitration clause. This choice should still be confirmed with counsel before launch, as it is a considered business decision, not an attorney-vetted legal conclusion.

17. General

Entire agreement. These Terms, the Privacy Policy, and any signed order form/Pilot Agreement constitute the entire agreement. Severability. Unenforceable provisions do not affect the rest. Assignment. No assignment by Customer without consent; Amagi may assign in an M&A transaction. No waiver. Non-enforcement is not a waiver. Notices. By email, SMS, or posting on the Service.

18. Contact

Amagi Solutions Group, Inc. — 3465 Lawrenceville Suwanee Rd, Suite A, Suwanee, GA 30024 — hello@amagisolutionsgroup.com