Privacy Policy

1. Introduction

CommandDeck ("Company", "we", "us", or "our") respects your privacy and is committed to protecting the personal information of our employees, customers, and business partners. This Privacy Policy describes how we collect, use, disclose, and safeguard information through our CommandDeck Dashboard application ("Software").

Scope: This Software is designed for internal business operations only and is used exclusively by authorized CommandDeck employees and contractors.

2. Information We Collect

2.1 Employee Information

We collect and process the following employee information:

• Name, email address, and phone number
• Employment details (position, role, hire date, hourly rate)
• Work hours, drive time, and attendance records
• Payroll information including wages, bonuses, and commissions
• Emergency contact information
• Authentication credentials (email and encrypted password)

2.2 Customer Information

We collect and process customer information including:

• Name, company name, and contact information
• Service addresses and locations
• Billing and payment information
• Service history and preferences
• Communications and notes

2.3 Business Data

• Job schedules and assignments
• Proposals, invoices, and financial records
• Equipment and inventory tracking
• Incident reports
• Sales and commission records
• Form submissions and documentation

2.4 Usage Information

• Login activity and authentication logs
• Activity logs (actions performed in the system)
• Browser type and device information
• IP addresses

3. How We Use Information

We use collected information for the following business purposes:

• Managing employee schedules, payroll, and compensation
• Processing customer service requests and managing relationships
• Creating and managing proposals, invoices, and financial records
• Tracking job assignments and work completion
• Maintaining equipment and inventory
• Generating business reports and analytics
• Ensuring system security and preventing unauthorized access
• Complying with legal and regulatory requirements
• Integrating with QuickBooks for payroll and accounting purposes

4. Third-Party Integrations

4.1 QuickBooks Integration

The Software integrates with QuickBooks Online (operated by Intuit Inc.) to synchronize:

• Employee information and payroll data
• Customer and invoice information
• Time tracking and billing records

When you connect to QuickBooks, you authorize us to access your QuickBooks data according to the permissions you grant. QuickBooks has its own privacy policy available at intuit.com.

4.2 Supabase (Database and Authentication)

We use Supabase for secure data storage and user authentication. Supabase is SOC 2 Type II certified and maintains industry-standard security practices.

4.3 Email Services

We use Resend for sending transactional emails (proposals, invoices, notifications). Email addresses are shared with Resend only for delivery purposes.

5. Data Security

We implement appropriate security measures to protect your information:

• Encryption in transit (HTTPS/TLS) and at rest
• Password hashing and secure authentication
• Row-Level Security (RLS) to ensure users only access their authorized data
• Role-based access control (RBAC)
• Regular security updates and monitoring
• Activity logging and audit trails
• Secure API integrations with third-party services

6. Data Retention

We retain information for as long as necessary to fulfill business and legal obligations:

• Employee Records: Retained for the duration of employment plus 7 years for payroll tax purposes
• Customer Records: Retained for the duration of the business relationship plus 7 years
• Financial Records: Retained for 7 years for tax and accounting purposes
• Activity Logs: Retained for 1 year for security and audit purposes

7. Data Sharing and Disclosure

We do not sell, rent, or share personal information except:

• With Service Providers: QuickBooks, Supabase, Resend, and other essential service providers
• For Legal Compliance: When required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• With Consent: When you explicitly authorize disclosure

Internal Access: Only authorized CommandDeck employees with appropriate roles can access information necessary for their job functions.

8. Employee Rights

Employees have the right to:

• Access their personal information stored in the system
• Request correction of inaccurate information
• Receive an explanation of how their data is used
• Request deletion of data (subject to legal retention requirements)

9. Customer Rights

As a service provider, we process customer information on behalf of our business operations. Customers have the right to:

• Request access to their personal information
• Request correction or deletion of information
• Opt-out of marketing communications
• Request information about data sharing practices

10. Cookies and Tracking

The Software uses essential cookies for:

• Authentication and session management
• Security and fraud prevention
• Caching user preferences

We do not use advertising or tracking cookies. We do not track users across other websites.

11. Children's Privacy

The Software is intended for business use only and is not directed at children under 18. We do not knowingly collect information from children.

12. Data Breach Notification

In the event of a data breach that compromises personal information, we will:

• Investigate and contain the breach immediately
• Notify affected individuals within 72 hours when feasible
• Report to relevant authorities as required by law
• Take steps to prevent future breaches

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates the most recent revision. Continued use of the Software after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: