WayMark Privacy Policy

Effective Date: December 21, 2025
Last Updated: December 21, 2025

1. Information We Collect

a. Information you provide to us

• Account information: name, business name, email address, phone number, and similar contact details.
• Authentication credentials: OAuth tokens and API credentials you authorize for connecting QBO and other third-party services. We do not collect or store your QBO username or password.
• Communications: messages you send to us for support, sales, or feedback.
• Payment information: if you purchase a paid plan, billing details are collected and processed by our payment processor; we do not store full payment card numbers.

b. Information we access from connected services (Customer Data)

When you connect QuickBooks Online or another third-party service, you authorize us to access information from that service on your behalf. From QBO this may include:

• Company profile and accounting settings
• Customers, vendors, and employees
• Invoices, estimates, sales receipts, and payments
• Bills, expenses, and purchase orders
• Chart of accounts, journal entries, and transaction history
• Items, services, and pricing
• Attachments and notes associated with the above

We access only the data necessary to deliver the features you have configured.

c. Information collected automatically

• Usage data: pages viewed, features used, timestamps, and similar diagnostic information.
• Device and log data: IP address, browser type, operating system, and error logs.
• Cookies and similar technologies: we use a limited set of cookies necessary to operate the Service and to remember your preferences. We do not use cookies for cross-site advertising.

2. How We Use Information

We use information to:

• Provide, operate, and maintain the Service, including reading QBO data, writing data back to QBO at your direction, syncing data between your connected systems, and supporting job costing and reporting workflows you configure.
• Authenticate users and secure the Service.
• Communicate with you about your account, support requests, security alerts, and material changes to the Service.
• Monitor and improve the performance, reliability, and security of the Service.
• Comply with legal obligations and enforce our Terms.

We do not sell Customer Data. We do not use Customer Data for advertising. We do not use your QBO data to train general-purpose machine learning models.

3. How Customer Data Flows Through the Service

The Service is designed as a pass-through integration. When you authorize WayMark to access your QBO account, data is read from QBO and delivered to the destination systems you have configured (for example, your own Airtable base or another tool you control). WayMark does not maintain an independent long-term copy of your QBO data for purposes other than delivering the Service.

In the course of delivering the Service, WayMark may temporarily process Customer Data in:

• Encrypted infrastructure used to receive, transform, and route data (such as Railway and Vercel).
• Operational logs used for debugging, error handling, and abuse prevention. These logs are retained for a limited period and access is restricted.
• Encrypted queues and caches needed to handle retries, rate limits, and reliability.

4. How We Share Information

We share information only as described below:

• Service providers (sub-processors): we use trusted vendors to host and operate the Service, including cloud infrastructure providers (such as Railway and Vercel), database providers (such as Supabase, where applicable), email and communication providers, error monitoring providers, and payment processors. These providers may process Customer Data only on our behalf and under contractual obligations to protect it.
• At your direction: we share Customer Data with the third-party systems you connect or designate as destinations (for example, your own Airtable base or other tools).
• Legal requirements: we may disclose information if required to comply with applicable law, legal process, or a lawful government request, or to protect our rights, safety, or property, or that of our customers or the public.
• Business transfers: if WayMark is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your data.

We do not sell personal information or Customer Data.

5. QuickBooks Online Specifics

• WayMark accesses your QBO data only after you expressly authorize the connection through Intuit's OAuth flow.
• You can revoke WayMark's access at any time through your QuickBooks Online account settings (My Apps → Disconnect).
• When you disconnect, WayMark will stop accessing new data from your QBO account. We will delete or de-identify any Customer Data we hold in accordance with Section 7 (Data Retention) below, except as required to be retained for legal, audit, or backup purposes.
• WayMark complies with Intuit's developer policies. We do not export your QBO data to third parties for marketing or sale.

6. Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect information, including:

• TLS encryption for data in transit
• Encryption at rest for stored credentials and sensitive data
• Access controls and least-privilege permissions for personnel
• Isolation of customer credentials and tokens
• Logging and monitoring for unusual activity

7. Data Retention

We retain information for as long as needed to provide the Service to you and for legitimate business purposes such as legal compliance, dispute resolution, and enforcement of our agreements.

• Account information: retained while your account is active and for a reasonable period afterward.
• Customer Data accessed from QBO: because WayMark operates as a pass-through, Customer Data is generally not retained long-term in WayMark systems. Transient operational data (logs, queues, caches) is retained for a limited period for reliability and security purposes.
• Backups: residual copies in encrypted backups are deleted in accordance with our backup rotation schedule.

You may request deletion of your information at any time as described in Section 8.

8. Your Rights and Choices

Depending on where you are located, you may have rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Receive a portable copy of certain information

To exercise these rights, contact us at info@mywaymark.io. We will respond consistent with applicable law. You may also disconnect WayMark from your QBO account at any time via your Intuit account.