Privacy Policy

1. Introduction

This Privacy Policy describes how WIPforge, operated by Archon Interactive LLC ("WIPforge," "we," "us"), collects, uses, shares, and protects information in connection with our websites and cloud-based services (the "Services"). WIPforge provides job-cost and work-in-progress reporting for businesses using QuickBooks Online. The Services are business tools directed to customers in the United States. If you use the Services on behalf of an organization, "you" refers to you and that organization.

2. Information we collect

Account information. When you sign in with Intuit (OpenID Connect), we receive your name and email address from Intuit. We do not receive or store your Intuit password. We also collect company/workspace information you provide.

QuickBooks Online data (customer-directed). When you connect a QBO company, you authorize us to access its accounting data through Intuit's API under the accounting scope you grant: transactions (invoices, bills, purchases, estimates, journal entries, time activities), customers/jobs/projects, vendors, accounts, and company preferences. We use this data solely to generate the reports and features you request. Our application only reads your data; it performs no writes to your QuickBooks file. OAuth access tokens are encrypted at rest (AES-256-GCM). Disconnecting a company revokes our access tokens with Intuit; you can disconnect at any time in the app or via Intuit.

Payment information. Payments are processed by Stripe, Inc.; we do not store full card or bank account numbers. We receive subscription status, plan, and billing metadata.

Usage, device, and diagnostic information. IP address, browser type, pages/features used, and error/diagnostic data (via our error-monitoring provider), used to operate, secure, and improve the Services.

Communications. Support requests and correspondence.

WIP schedule review submissions (prospective customers). If you request a free review of your existing WIP schedule through our website, we collect your email address, the accounting or ERP system you identify, and the document you upload (a financial document that may include project names and dollar amounts). We use these to prepare and return your review and for related follow-up; you may opt out of marketing email at any time, and you may request deletion of your submission at any time. Retention per Section 7. We do not retain your document or any identifying information after deletion; general, de-identified observations about WIP-schedule practices (for example, common calculation pitfalls) may inform improvements to our review criteria and materials.

3. How we use information

To provide and operate the Services (report generation, exports, multi-company management); billing and account administration; security, fraud prevention, and audit logging of sensitive operations; product improvement using aggregated or de-identified data; service communications (renewal reminders, security notices, trial and billing lifecycle emails); and legal compliance. We do not use your QuickBooks data to train machine-learning models, and we do not make automated decisions with legal or similarly significant effects about you.

4. How we share information

We do not sell personal information. We share information only with: service providers (subprocessors) that host and support the Services — currently Supabase (database, authentication), Vercel (hosting), Stripe (payments), Resend (transactional email), Sentry (error monitoring), Upstash (rate limiting), and PostHog (product analytics) — each bound to use it only to provide their service; Intuit, as directed by you through the integration you authorize; professional advisors and authorities where required by law or to protect rights and safety; and a successor entity in connection with a merger, reorganization, or sale of assets, with notice to you.

5. Your QuickBooks data

You own your accounting data. Our application only reads it and never writes to your QuickBooks file; we use it only to provide the Services, retain report outputs you generate, and delete per Section 7. Revoking access (in-app disconnect, or via Intuit's connected-apps settings) stops all further access immediately.

6. Security

Encryption in transit (TLS) and at rest; OAuth token encryption with key rotation support; workspace-scoped data isolation enforced at the database layer (row-level security); append-only audit logging of sensitive operations; rate limiting; security headers; error monitoring with sensitive-data scrubbing. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7. Data retention

8. Your rights and choices

You may access, correct, export, or delete your information via the app or by contacting us. You may opt out of non-essential emails. California residents: you have the rights to know, delete, correct, and to non-discrimination under the CCPA/CPRA; we do not sell or share personal information for cross-context behavioral advertising; submit requests via the contact below.

9. US-directed services

The Services are operated from the United States and directed to US businesses. If you access the Services from elsewhere, you understand your information is processed in the US. The Services are not directed to individuals in the European Economic Area or the United Kingdom.

10. Cookies

The app uses essential cookies only (authentication, security). The marketing site uses privacy-respecting analytics; if we later add advertising or marketing tags, we will update this policy and add consent management.

11. Children

The Services are not directed to children under 18 and we do not knowingly collect their information.

12. Changes; contact

We will post changes with an updated effective date and notify account holders of material changes. Contact: support@wipforge.com · WIPforge c/o Archon Interactive LLC, 2201 Old Court Road, Baltimore, MD 21208.