Privacy Policy

When you create an account we store your email address, your name if you give one, and a one-way hash of your password. We never hold the password itself and cannot recover it. We also record which company you belong to and your role in it.

When someone invites a colleague we store that colleague's email address so the invitation can be sent and accepted. Invitations expire after seven days.

Only after you authorize it, and only for the QuickBooks company you choose. We read and store:

• customers and jobs, including a billing address and email address where QuickBooks holds one
• vendors, and their bills, purchase orders and expenses
• invoices and payments
• details about documents attached to those transactions — file name, type and size. The documents themselves stay in QuickBooks and are fetched only when someone opens one.

We do not read payroll, employee records or bank credentials. Where an expense on a job was paid to an employee, we count it on that job by what was bought; the employee's name is not kept.

Only when someone on your team presses the button for it, and only these:

• an invoice made from a payment application you issued, with the application attached to it as a PDF
• a purchase order made from a contract amount
• a vendor, when you add a subcontractor QuickBooks does not have yet
• a customer or job, when you set up a job here that QuickBooks does not have yet

We never change or delete anything else in your QuickBooks company, and nothing is written on a schedule or by a sync. Unlinking a document here forgets the link in Iconic QB and leaves the document in QuickBooks.

To show you your own figures: budgets by vendor, what has been billed and paid, and the payment applications you issue. Nothing more. We do not sell it, we do not advertise against it, and we do not use it to train anything.

Only people you have invited into your company on Iconic QB. Each contractor's books are separated by the QuickBooks connection that owns them, and every lookup is filtered on that connection. Automated tests run on every change specifically to prove one contractor cannot read another's records.

Your QuickBooks access token, refresh token and company identifier are encrypted before they are stored, using AES-256-GCM with a key held only in the deployment's configuration. Passwords are hashed with bcrypt and cannot be recovered from what we hold. All traffic to the site is over HTTPS, and no page here may be stored by a shared cache.

We count failed sign-in attempts so that passwords cannot be guessed at indefinitely. Only a one-way hash of the address tried and the network it came from is kept, never either in a readable form, and the record is deleted within a day.

Only cookies the service needs to work. There is no advertising or analytics cookie, and nothing here tracks you across other sites.

• one that keeps you signed in
• one remembering which company you are looking at, for people in more than one
• short-lived ones carrying an invitation, a password reset, or a refused connection — these hold what would otherwise sit in the address bar

All are set so that scripts on the page cannot read them, and so that browsers only send them over HTTPS.

• Intuit — the source of the QuickBooks data, under the authorization you grant.
• Vercel — hosts the site.
• Our database host — stores the records described above.
• Resend — delivers account emails such as invitations, confirmations and password resets.

Each is used only to run the service.

Disconnecting QuickBooks in Settings stops the syncing and ends our access to your QuickBooks company, which we also revoke with Intuit. It does not delete anything: your projects, budget lines, vendor history, attachment records and issued draw requests all remain, frozen as they were, and reconnecting the same company resumes where it stopped.

Deleting that data is a separate choice, offered beside the disconnect and confirmed by typing the company name. It removes the projects and everything synced or entered under them, and releases the QuickBooks company so another account can connect it. Draw requests you have already issued are kept even then, because they are documents an owner was given and re-creating them would change what was sent.

To delete your account and everything with it, write to us at the address below and we will action it.

If this policy changes materially we will say so in the app before the change takes effect.

Questions about your data go to chaimtgeller@gmail.com.