Privacy Policy

This Privacy Policy explains how North South Tech ("we", "us") collects, uses and protects information in connection with FinDir (the "Service"). It applies to account holders, users invited to a company workspace, and individuals whose information our customers store in the Service.

1. Information we collect

• Account information — name, email address, a hashed password, company name, and the role you hold within a workspace.
• Business data you enter — clients, projects, invoices, employees, departments, salaries, time entries and similar records that you or your team add to the Service.
• QuickBooks Online data — if you connect QuickBooks, we receive OAuth tokens and your QuickBooks company ID, and we read accounting data such as accounts, transactions and related records via the com.intuit.quickbooks.accounting scope in order to build reports in the Service.
• Usage and technical data — session cookies required to keep you signed in, and audit logs of actions taken in a workspace (for example, who changed a record and when).

2. How we use information

• to provide the Service: authenticate users, generate P&L reports, invoices, forecasts and payroll;
• to sync data from integrations you have connected;
• to send transactional emails such as invitations, email confirmations and invoices;
• to secure the Service, prevent abuse and troubleshoot problems;
• to comply with legal obligations.

We do not sell personal information, use your business or QuickBooks data for advertising, or use it to train machine-learning models.

3. How we share information

We share information only as needed to run the Service:

• Within your workspace — with other users of your company, according to the roles and permissions your administrators assign.
• Service providers — hosting and database providers, and our email delivery provider, who process data on our behalf under confidentiality obligations.
• Intuit — when you connect QuickBooks, data is exchanged with Intuit under your authorization and Intuit's own privacy policy.
• Legal reasons — when required by law, or to protect the rights and safety of our users or others.

4. Security

Data is transmitted over HTTPS. Passwords are stored as one-way hashes, and QuickBooks access and refresh tokens are encrypted at rest. Each company's data is isolated from other companies, and access within a workspace is controlled by role-based permissions. No system is perfectly secure, but we work to protect your information and will notify affected customers of a breach as required by law.

5. Data retention and deletion

We keep information for as long as your account is active or as needed to provide the Service. You can disconnect QuickBooks at any time, which deletes the stored tokens; you can also revoke access from your Intuit account. To request deletion of your account or your company's data, contact support@northsouthtech.co. We may retain limited records where required by law.

6. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain processing. If your information was added to the Service by an employer or other customer, please contact that organization first; we will assist them in responding. You can also reach us directly at support@northsouthtech.co.

7. Cookies

We use only cookies that are necessary for sign-in and security. We do not use advertising or third-party tracking cookies.

8. Children

The Service is intended for businesses and is not directed to children under 16.

9. Changes

We may update this policy from time to time. The effective date above shows the latest version; for material changes we will notify account administrators.

10. Contact

Questions or requests about privacy: support@northsouthtech.co.