Privacy Policy

1. Information We Collect

Account Information

• Email address (used for sign-in)
• Display name and profile picture (optional)
• Role and permission assignments (set by administrators)
• Authentication method used (Google, magic link, password)

Business Operations Data

The Service stores business records relevant to its functions, including:

• Sales transactions and customer records
• Technician assignments, schedules, and performance data
• Employee records (name, contact information, position, location)
• Service area zones and geographic data
• Recheck and escalation records

QuickBooks Data

When connected to your QuickBooks Online account, the Service accesses transaction data — primarily expense (Purchase) records — including transaction dates, vendors, amounts, account categories, descriptions, and class assignments. This data is used solely within the Service for review, categorization, and reporting. We do not sell, share, or use QuickBooks data for any purpose other than the operation of the Service.

Credit Card Transaction Data

Imported credit card statement data, including transaction details and receipt images uploaded by users, is stored to support expense tracking workflows.

Usage Data

The Service logs limited authentication events and changes to data records to provide audit trails for administrators.

2. How We Use Information

We use collected information to:

• Provide and operate the Service for authorized users
• Authenticate users and enforce permissions
• Display, categorize, and analyze business data on dashboards and reports
• Maintain audit trails of changes to data
• Communicate with users about their accounts (e.g., invitations, password resets)

3. How We Share Information

We do not sell or rent personal or business information. We share data only with:

• Service providers strictly as necessary to operate the Service. Current providers include Supabase (data storage), Vercel (hosting), Google (OAuth authentication), Resend (transactional email), and Intuit (QuickBooks integration). Each acts under their own privacy and security commitments.
• Authorized internal users based on role and permissions.
• Legal authorities when required by valid legal process.

4. QuickBooks Data Handling

Data accessed via the QuickBooks Online API is used exclusively within the Service to display, categorize, and report on financial transactions. We do not transmit QuickBooks data to any third party except as required to operate the integration (Intuit's own services). Users with administrator access can disconnect the QuickBooks integration at any time, which revokes our access tokens and stops further data retrieval.

5. Data Storage and Security

• Data is stored on Supabase infrastructure in US data centers.
• Connections to the Service are encrypted via HTTPS.
• Database access is restricted to server-side service credentials; the public client never has direct database access.
• Access to user records is governed by row-level security policies and role-based authorization.

6. Data Retention

We retain data for as long as necessary to operate the Service or comply with legal obligations. Audit logs may be retained beyond active use for record-keeping purposes. Users may request deletion of personal data through the contact information below; some records may need to be preserved for legitimate business or legal reasons.

7. Your Choices

• You may update your display name and profile picture from your account profile.
• You may disconnect third-party integrations (QuickBooks, Google) by contacting an administrator.
• You may request information about, correction of, or deletion of personal data by contacting business@lakeappliancerepair.com.

8. Children's Privacy

The Service is not intended for use by individuals under the age of 13. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the Service or via email where appropriate.

10. Contact

Questions about this Privacy Policy or requests regarding personal data should be directed to business@lakeappliancerepair.com.