1. Scope and responsibility
This policy covers the finance workspace at gd.usesuited.com, used for the internal operations of G and D East Bay Holdings, Inc. (the “Business”). The Business determines which records and accounts are used for its bookkeeping. Suited provides technical operation and support. For privacy questions or requests, contact ben@usesuited.com.
2. Information we process
- Workspace and access information: account identifiers, email addresses, workspace roles, access events, and configuration needed to operate the workspace.
- QuickBooks Online data: authorized company details, chart of accounts, balances, transactions, bills, invoices, payments, customer and vendor records, reports, and available supporting references. Records may include names, contact details, and transaction descriptions.
- Other business records: bank and card activity, settlement information, receipts, uploaded statements or CSV files, payroll-related records, workpapers, review notes, and operational records that authorized users supply or connect.
- Connection credentials: application credentials and OAuth tokens needed for authorized provider access. The workspace uses Intuit’s authorization flow; it does not ask you to give it your QuickBooks password.
- Technical and support information: IP addresses, browser and device information, request and error logs, and information you include in support requests.
The records available depend on the accounts connected, permissions granted, and features used. Avoid uploading personal information that is unnecessary for the Business’s bookkeeping.
3. How information is used
Information is used to import and organize business records, prepare reports and reconciliations, identify discrepancies, support review and approval workflows, submit authorized transactions where enabled, maintain audit history, troubleshoot problems, and protect the service. Connection tokens are used to maintain the account access you authorize.
We do not sell workspace personal information or share it for cross-context behavioral advertising. QuickBooks data is used for the Business’s authorized workflows and related operation and support of this workspace.
4. Who receives information
Information may be available to people the Business authorizes to use or support its workspace, including its bookkeepers, accountants, and Suited support personnel as needed. The Business is responsible for deciding who may access its workspace and protecting any shared access mechanism.
The workspace uses Vercel for application hosting and Supabase for database and related backend services. Intuit processes QuickBooks authorization and API requests. Other providers, such as Plaid, Stripe, or connected business systems, process the information required for integrations the Business enables. These providers have their own terms and privacy policies. The site also loads fonts from Google Fonts, which receives the technical information included in browser requests for those fonts.
Information may also be disclosed where required by law, to respond to a valid legal request, or as reasonably necessary to investigate misuse or protect the Business, users, and service. Providers may process information in the United States or other locations where they operate.
5. Cookies and technical storage
The workspace uses necessary cookies or similar technical storage where required for provider authorization, security, and access. For example, the QuickBooks connection flow uses a short-lived state cookie to verify the authorization return. Hosting or access-protection services may set their own necessary cookies. The workspace does not currently use advertising cookies.
6. Security
Safeguards include HTTPS in hosted operation, server-side handling of provider credentials, encryption of saved integration credentials and QuickBooks grants, and database checks that restrict access to the configured business workspace. No service or method of storage can guarantee absolute security. Protect access to the workspace and promptly report suspected misuse to ben@usesuited.com.
7. Retention and disconnection
Business records and audit history are retained while needed to provide the workspace and meet the Business’s accounting, legal, dispute-resolution, and security needs. The applicable retention period depends on the record and the Business’s obligations. Contact us for the retention requirements that apply to a particular record.
You can stop QuickBooks access through the QuickBooks connection page or by disconnecting the app in QuickBooks. A successful workspace disconnection revokes Intuit authorization and removes the saved QuickBooks grant from the workspace. Imported records, reports, and audit history remain until separately deleted under the Business’s retention requirements. Saved Intuit application settings may remain for a future connection; they do not by themselves authorize access to a QuickBooks company.
Disconnecting QuickBooks does not delete records in QuickBooks, cancel its subscription, or disconnect other services. Copies in backups or provider logs may remain until those systems’ retention cycles expire.
8. Your requests and choices
To request access, correction, export, or deletion of information, or to ask about applicable privacy rights, email ben@usesuited.com. Identify the workspace and describe the request without including credentials or full account numbers. We may verify your identity and authority and coordinate with the Business before acting. Some records may need to be retained for legal, accounting, or security reasons; we will explain any applicable limitation.
This workspace is intended for authorized business users and is not directed to children.
9. Changes and contact
Changes will be posted on this page with an updated effective date. Material changes will be communicated to the Business’s workspace administrator. For questions about this policy or data handling, contact Suited at ben@usesuited.com.