Privacy Policy

Last updated: March 16, 2026

Best Decision Business LLC ("Company", "we", "us") operates Best Decision Project Tools ("the Service"). This Privacy Policy describes how we collect, use, and protect your information.

1. Information We Collect

Account Information: When your employer or company administrator creates an account for you, we store your name, username, and hashed password.

Business Data: The Service stores data you and your organization enter, including time entries, job records, estimates, invoices, receipts, photos, schedules, and task completions.

Location Data: If enabled by your company, the Service may collect GPS coordinates when you clock in or out, solely for time-tracking verification purposes.

Usage Data: We collect basic server logs (IP addresses, request timestamps) for security and troubleshooting purposes.

2. How We Use Your Information

• To provide and operate the Service for your organization.
• To process and sync data with third-party services you connect (e.g., QuickBooks Online or Xero) at your direction.
• To maintain security and prevent unauthorized access.
• To troubleshoot technical issues and improve the Service.

3. Third-Party Integrations

When you connect the Service to an accounting provider such as QuickBooks Online or Xero, we transmit the business records needed for the sync you initiate, such as customer names, estimates or quotes, invoices, receipts, payments, fees, and refunds. We store encrypted OAuth tokens to maintain the connection. You can disconnect at any time from Admin Settings, which revokes our access.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties except:

• When you explicitly connect a third-party integration (e.g., QuickBooks Online, Xero, or Stripe).
• When required by law or legal process.
• To protect the rights, safety, or property of our users or the public.

5. Data Security

We use industry-standard measures to protect your data, including:

• HTTPS encryption for all data in transit.
• Hashed passwords (never stored in plain text).
• Encrypted storage of third-party OAuth tokens (AES-256 via Fernet).
• Role-based access controls separating admin, scheduler, and employee permissions.

6. Data Retention

We retain your data for as long as your organization's account is active. Company administrators can configure retention periods for certain data (e.g., task completion history). Upon account termination, data may be deleted after a reasonable retention period.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to certain processing of your data.

Contact your company administrator or reach out to us directly to exercise these rights.

8. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users of material changes through the Service.

10. Contact

For privacy-related questions or requests, contact us at: [email protected]