PRIVACY POLICY — ARTHUR CONNECTION Effective date: September 9, 2026 1. Overview This Privacy Policy explains how Decision Tree Inc. (“Decision Tree,” “we,” “us,” or “our”) handles information through Arthur Connection, an internal integration used by authorized Decision Tree personnel to connect with QuickBooks Online for bookkeeping, reconciliation, reporting, and related business operations. Arthur Connection is intended for internal business use and is not offered as a consumer application. 2. Information we access or collect Depending on the authorized workflow, Arthur Connection may access or process information from QuickBooks Online and related Decision Tree records, including: • Company profile and accounting settings; • Chart-of-accounts information; • Vendor and customer names and identifiers; • Bills, bill payments, invoices, payment status, transaction dates, amounts, reference numbers, and purchase-order references; • Products, services, accounts, and other accounting classifications; • Reports and transaction metadata; and • OAuth authorization data needed to maintain the QuickBooks connection. We may also maintain operational logs such as access time, requested action, result, error information, and approval status. Arthur Connection is not designed to collect payment-card numbers, online-banking passwords, or Intuit account passwords. 3. How we use information We use information accessed through Arthur Connection to: • Match and reconcile accounting transactions; • Verify vendor bills, customer invoices, and payment status; • Prepare internal reports and exception lists; • Record transactions that have been reviewed and authorized; • Detect duplicate, missing, or inconsistent records; • Maintain application security and troubleshoot errors; and • Meet Decision Tree’s accounting, audit, legal, and operational obligations. We do not sell QuickBooks data or use it for third-party advertising. 4. QuickBooks authorization Arthur Connection uses Intuit’s OAuth authorization process. Authorized users sign in directly with Intuit and approve access to the selected QuickBooks Online company. Decision Tree does not receive or store the user’s Intuit password. Authorization credentials and tokens should be stored in restricted systems and used only to perform approved functions. Access can be disconnected through applicable Intuit or QuickBooks settings or by contacting Decision Tree. 5. How information is shared Information may be shared only as reasonably necessary with: • Authorized Decision Tree employees, officers, accountants, and contractors who require it for legitimate business purposes; • Intuit and other service providers that operate the connected services or supporting infrastructure; • Professional advisers, auditors, insurers, or regulators when appropriate; and • Government authorities or other parties when required by law or necessary to protect legal rights, security, or safety. Service providers are expected to handle information only for authorized purposes and subject to applicable confidentiality and security requirements. 6. Data security Decision Tree uses reasonable administrative, technical, and physical safeguards appropriate to the nature of the information. These may include restricted access, authentication controls, secure transmission, protected credential storage, operational logging, and review or approval controls for sensitive accounting actions. No system is completely secure, and we cannot guarantee absolute security. Suspected unauthorized access should be reported promptly using the contact information below. 7. Data retention and deletion Decision Tree retains accounting information, transaction records, authorization records, and operational logs only as long as reasonably necessary for business, accounting, tax, audit, security, and legal purposes. Retention may also be governed by Decision Tree’s internal policies and applicable law. When information is no longer required, Decision Tree may delete, anonymize, or securely dispose of it. Disconnecting Arthur Connection stops future API access but does not automatically delete records that Decision Tree must retain for legitimate accounting or legal purposes. 8. Access, correction, and requests Authorized users may review or correct much of the underlying accounting information directly in QuickBooks Online, subject to their permissions and Decision Tree’s accounting controls. Questions or requests concerning access, correction, deletion, or disconnection may be submitted to Decision Tree using the contact information below. We may need to verify the requester’s identity and authority before acting on a request, and some records may need to be retained as required by law or legitimate business obligations. 9. Children’s information Arthur Connection is a business accounting tool and is not directed to children. We do not knowingly use it to collect personal information from children. 10. International processing Information may be processed where Decision Tree, Intuit, or authorized service providers operate. Appropriate safeguards will be used as required by applicable law. 11. Changes to this policy We may update this Privacy Policy when our practices, services, or legal obligations change. The current version and effective date will be posted on this page. 12. Contact us Questions, privacy requests, or security concerns relating to Arthur Connection may be directed to: Decision Tree Inc. 306 Thunderbird El Paso, TX 79912 Email: info@dtreetech.com Phone: 915-584-3419