Privacy Policy

Who we are

The Crew Bonus application is an internal, invite-only tool operated by Bonn Window and Door to plan jobs and calculate crew bonuses. It is not offered to the general public.

Information we collect

• Account information: display name, email address, and an encrypted password hash.
• Role information: whether an account has administrator permissions.
• Job data you enter: job names, labor price, target revenue per hour, bonus pool percentage, expected efficiency, crew count, crew member hours, wage rates, and job status.
• QuickBooks data (only if connected): invoice numbers, invoice dates, totals, invoice line items and their product/service names and amounts, the customer name on an invoice, and your QuickBooks company name and company (realm) ID.

We do not collect payment card data, government identifiers, or location data.

How we use it

Data is used only to operate the App: to authenticate users, to display a shared job board to your team, to calculate budget hours, efficiency, bonus pools, and individual bonus shares, and — when QuickBooks is connected — to find the invoice matching a job and read the labor line amounts into the job's labor price. We do not use your data for advertising, profiling, or model training.

QuickBooks Online integration

An administrator authorizes the connection through Intuit's OAuth flow. The App requests read access under the accounting scope and performs read-only requests; it never writes to your QuickBooks company. Access and refresh tokens are encrypted with AES-256-GCM before being stored, and are readable only by the App's backend — never by the browser or by other users. Invoice data is fetched on demand; only the linked invoice number, customer name, sync timestamp, and derived labor amount are stored on the job record.

An administrator can disconnect QuickBooks at any time on the Admin page. Disconnecting deletes the stored tokens and company ID from our systems. You can also revoke the App from within your Intuit account.

Sharing

We do not sell, rent, or trade any data. Data is visible to authenticated members of your team inside the App. We rely on the following service providers to run the App:

• Lovable Cloud — application hosting, authentication, and database storage.
• Intuit (QuickBooks Online) — source of invoice data, only when connected.

We may disclose data if required by law or to protect our legal rights.

Security

Traffic is served over HTTPS. Accounts are password-protected and access to job data requires an authenticated session; database access is restricted by row-level security policies. QuickBooks tokens are encrypted at rest. No system can be guaranteed perfectly secure, so we do not claim the App is immune to all risk.

Retention and deletion

Account and job data are kept for as long as the account or job record exists in the App. Administrators can delete users and jobs at any time; deletion removes the associated records. QuickBooks tokens are deleted immediately on disconnect. To request deletion of your personal data, email us at the address below.

Your choices

You may request access to, correction of, or deletion of the personal data we hold about you by contacting us. Because this is an employer-operated internal tool, some records may be retained where required for business or legal reasons.

Cookies

The App stores a session token in your browser so you stay signed in. It does not use advertising or third-party tracking cookies.

Changes

We may update this policy; the "last updated" date above reflects the most recent revision.

Contact

Privacy questions or requests: jaredjbonn@gmail.com.