Privacy Policy

MassDwell Hub is a private, internal application operated by MassDwell LLC (“MassDwell,” “we,” “us”) for authorized MassDwell personnel. This policy explains what data the Application handles and how we protect it.

1. Information we handle

• Account & authentication: your name and email, managed through our authentication provider (Clerk), used to sign you in and control access.
• QuickBooks Online data: when an authorized user connects QuickBooks, the Application reads accounting records — vendor bills, expenses, chart-of-accounts names, and customer/project labels — to display cost actuals alongside project estimates. Access is read-only; the Application does not create, modify, or delete your QuickBooks records except, where you explicitly enable it, to create an invoice you have requested.
• Operational data: project, estimate, feasibility, and contract information that MassDwell staff enter to run the business.

2. How we use it

We use this information solely for MassDwell’s internal operations — job costing, financial reporting, and project management. We do not sell, rent, or share QuickBooks data (or any other data) with third parties for their own marketing or commercial purposes. QuickBooks data is not used to build advertising profiles.

3. How we store and protect it

• Data is transmitted over encrypted connections (TLS/HTTPS).
• QuickBooks OAuth tokens are encrypted at rest using AES-256-GCM and are never exposed to the browser.
• Data is stored in our database provider (Supabase) with row-level security; the accounting-connection table is reachable only by trusted server-side credentials.
• Access to accounting figures is restricted to MassDwell administrators.

4. Your control & disconnection

You can revoke the QuickBooks connection at any time — from within QuickBooks Online (Settings → Manage Apps → Disconnect) or from the Application’s admin screen. Disconnecting stops all further access and removes the stored connection.

5. Retention

We retain data only as long as needed for MassDwell’s business and legal obligations. Stored QuickBooks connection credentials are deleted when the integration is disconnected.

6. Contact

Questions or requests regarding this policy or your data: steve.vettori@massdwell.com.