BVY Local Dashboard — Privacy Policy

Proposed effective date: October 21, 2026

Scope

This policy describes the internal BVY Local Dashboard operated by BVY Renovations LLC. It covers dashboard processing, not the general BVY marketing website or the independent practices of Intuit, Microsoft, or Google.

Information processed and purpose

Authorized BVY personnel may enter project/customer names, contact details, job addresses, notes, tasks, dates, and links to existing project folders. After the owner authorizes QuickBooks access, the local server reads the company name and invoice data, including customer references/names, invoice identifiers, dates, amounts, currencies, and remaining balances. These records help BVY organize work and review receivables. Data is not sold or used for advertising.

Where information is stored

Projects, tasks, invoice snapshots, and project assignments are saved in the browser on the authorized computer. The local server stores QuickBooks credentials and its latest invoice snapshot in a password-encrypted vault on that computer. The connection password is used to derive an encryption key, which remains in server memory while the vault is unlocked. It is not sent to Intuit. Browser records and downloaded JSON backups are not encrypted by the application. The owner controls where downloaded backups are stored and any OneDrive copies.

Connections and disclosures

The local server communicates with Intuit to refresh OAuth access and read authorized accounting data. Credentials are not included in dashboard JSON backups. This version has no automated Gmail or OneDrive data synchronization. Opening email or file links navigates to the relevant provider; Gmail searches may contain the customer email address or project code chosen for that search. No analytics scripts or advertising trackers are built into the local dashboard.

Access and safeguards

The application is intended for an authorized BVY user on a protected computer. It has no separate dashboard login or application MFA. Its server binds to the computer's loopback address and uses same-origin and CSRF request checks. The owner is responsible for device access, browser profiles, strong passwords, updates, and the protection of exported files.

Retention and deletion

Browser records remain until the owner removes them or clears the workspace or browser storage. A successful full QuickBooks refresh replaces the synced invoice snapshot and removes invoices no longer returned by QuickBooks. Removing a local snapshot does not delete the original QuickBooks record, and automatic updates may restore a record that still exists there. Remove local connection deletes the server's saved connection and snapshot. Browser records and downloaded backups require separate deletion. Revoking authorization in QuickBooks stops the app's future authorized access. The application does not modify or delete accounting records in QuickBooks.

Questions and requests

Contact BVY Renovations LLC at bruce@bvyrenovations.com with questions about dashboard records or requests to review, correct, or remove information.

Changes

BVY will update this policy if dashboard data handling changes. Future integrations or public/multi-user features require reviewing this policy before deployment.