ArborNature Site Solutions

ArborNature Site Solutions, Inc. ("Company", "we", "us", or "our") is committed to protecting the privacy of our users. This Privacy Policy describes how we collect, use, store, and share information when you use our web application and related services ("Application").

1. Information We Collect

Information You Provide

Account Information: Name, email address, username, and password when your account is created by an administrator.
Business Data: Client information, job details, estimates, proposals, invoices, equipment records, crew assignments, time tracking entries, and related business data you enter into the Application.
Financial Information: Invoice amounts, payment records, and billing details processed through the Application and connected third-party services (e.g., QuickBooks Online).
Communications: Any information you provide when contacting us for support.

Information Collected Automatically

Location Data: With your permission, we collect your device's precise GPS location. In the ArborNature Crew mobile app, location is collected continuously, including in the background, only while you are clocked in to a job, so office staff can see where crews are working and coordinate jobs. Location collection stops when you clock out, and you can disable location permission in your device settings at any time.
Device Information: Browser type, operating system, and device identifiers.
Usage Data: Pages visited, features used, and interaction patterns within the Application.
Log Data: Server logs including IP addresses, timestamps, and request information.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Application
Process and manage jobs, estimates, proposals, and invoices
Facilitate time tracking and crew scheduling
Sync data with connected third-party services (e.g., QuickBooks Online)
Send transactional communications such as proposal emails and invoice notifications
Monitor and analyze usage patterns to improve user experience
Ensure security and prevent fraud or abuse
Comply with legal obligations

3. Third-Party Services and Data Sharing

We may share your information with the following types of third parties:

QuickBooks Online (Intuit): When you connect your QuickBooks account, we share customer and invoice data to create and manage invoices in your QuickBooks account. This data sharing is governed by Intuit's privacy policy.
Intuit Payments Inc.: Payment processing services within the Application are provided by Intuit Payments Inc. When payment transactions are processed through our QuickBooks integration, payment-related data (amounts, dates, and payment method types) is handled by Intuit Payments Inc. in accordance with their privacy policy and PCI DSS requirements. We do not directly store credit card numbers or bank account details.
Email Services: We use email delivery services to send proposal and invoice notifications to your clients.
Hosting Providers: Your data is stored on secure cloud infrastructure provided by our hosting partners.
Legal Requirements: We may disclose information if required by law, court order, or governmental regulation.

We do not sell your personal information to third parties.

4. QuickBooks Online Data

When you connect your QuickBooks Online account, we access your QuickBooks data solely to provide our services to you. Specifically:

Data Access: We access company information, customer records, and invoice data from your QuickBooks account to facilitate job management and invoicing.
Data Isolation: Your QuickBooks data is only accessible to authorized users within your organization. We never share your Intuit data with other customers or third parties.
Token Security: OAuth access and refresh tokens are encrypted at rest using AES-256-GCM encryption. Tokens are never stored in plain text, logged, or exposed in client-side code.
Disconnection: You may disconnect your QuickBooks account at any time through the Settings page. Upon disconnection, all stored tokens are revoked with Intuit and deleted from our database.
Data Deletion: When you disconnect your QuickBooks account, all associated OAuth tokens and connection metadata are permanently deleted from our systems.

5. Data Storage and Security

We implement industry-standard security measures to protect your data, including:

Encryption of data in transit (HTTPS/TLS 1.2+)
Encryption of sensitive data at rest (AES-256-GCM for OAuth tokens)
Secure password hashing (bcrypt)
Access controls and authentication requirements
Rate limiting and account lockout protections
CSRF protection on all OAuth flows
Security event logging and audit trails
Regular security reviews

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Application services. Business data (jobs, invoices, etc.) is retained as long as necessary for business and legal purposes. You may request deletion of your account and associated data by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate data
Request deletion of your personal data
Object to or restrict processing of your data
Withdraw consent for location tracking at any time through your device settings

To exercise these rights, contact us at the email address below.

8. Children's Privacy

The Application is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the Application after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

ArborNature Site Solutions, Inc.
Email: info@arbornaturesitesolutions.com